CVE-2025-62439
Last modified
CVE-2025-62439 is a medium-severity vulnerability rated 4.2/10 on the CVSS scale. An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.
Metrics
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-62439?
How severe is CVE-2025-62439?
How do I fix CVE-2025-62439?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-62425MAS (Matrix Authentication Service) is a user management and…8.3
- CVE-2025-62426vLLM is an inference and serving engine for large language m…6.5
- CVE-2025-62427The Angular SSR is a server-rise rendering tool for Angular …8.7
- CVE-2025-62428Drawing-Captcha APP provides interactive, engaging verificat…8.8
- CVE-2025-62429ClipBucket v5 is an open source video sharing platform. Prio…7.2
- CVE-2025-62430ClipBucket v5 is an open source video sharing platform. Clip…5.4
- CVE-2025-6244The Essential Addons for Elementor – Popular Elementor Templ…5.4
- CVE-2025-62440Rejected reason: Not used
- CVE-2025-62441Rejected reason: Not used
- CVE-2025-62442Rejected reason: Not used
- CVE-2025-62443Rejected reason: Not used
- CVE-2025-62444Rejected reason: Not used
Are you affected by CVE-2025-62439?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST