UpHeron
All vulnerabilities

Servers and applications

CVE-2024-26013

A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9 and before 7.0.15, Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0…

Severity
High 7.5
Published
8 Apr 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.0.16, 7.2.9, 7.2.10, 7.4.3, 7.4.5
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiProxyServers and applications · cpe:a:fortinet:fortiproxy
  • From 2.0.0 before 7.0.16
  • From 7.2.0 before 7.2.10
  • From 7.4.0 before 7.4.3
Fortinet FortiWebServers and applications · cpe:a:fortinet:fortiweb
  • From 7.4.0 before 7.4.3
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 6.4.0 before 7.0.16
  • From 7.2.0 before 7.2.9
  • From 7.4.0 before 7.4.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-26013
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-26013