CVE-2024-26008
MEDIUM
MEDIUM
Priority: 0.03
BB Relevance:
71/100
Published: 2025-10-14
Modified: 2026-11-09
First seen: 2026-11-09
Status: active
Attack Surface
Network
Low Complexity
No Auth
No Interaction
CVSS Vector Breakdown
AV:
Network
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
None
I:
None
A:
Low
Description
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.
Weakness Classification (1)
Affected Software (4)
| Vendor | Product | Version |
|---|---|---|
| fortinet | fortios | 6.2.0 – 7.2.8 |
| fortinet | fortipam | 1.0.0 – 1.3.0 |
| fortinet | fortiproxy | 1.2.0 – 7.2.10 |
| fortinet | fortiswitchmanager | 7.0.0 – 7.0.4 |
References & Advisories (1)
Vendor Advisory