6.2
Medium
CVE-2023-33306 A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4…
Description
A null pointer dereference in Fortinet FortiOS before 7.2.5, before 7.0.11 and before 6.4.13, FortiProxy before 7.2.4 and before 7.0.10 allows attacker to denial of sslvpn service via specifically crafted request in bookmark parameter.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiOS 7.2 | 7.2.0 → 7.2.4 | No fix stated |
| FortiOS 7.0 | 7.0.0 → 7.0.10 | No fix stated |
| FortiOS 6.4 | 6.4.0 → 6.4.12 | No fix stated |
| FortiProxy 7.2 | 7.2.0 → 7.2.3 | No fix stated |
| FortiProxy 7.0 | 7.0.0 → 7.0.9 | No fix stated |
Other CVEs of FortiOS
The 180 CVEs of FortiOS →
CVE-2026-106174
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated…
6.7
Medium
CVE-2026-106175
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
2.1
Low
CVE-2026-84392
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
2.5
Low
CVE-2026-84393
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
7.3
High