Fortinet FortiOS等 签名验证不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2025-59718
• https://www.gm7.org/archives/20889
• https://www.cup.edu.cn/nic/wlaq/70675f288bd9482d9985c1879dfa536f.htm
• https://www.tenablecloud.cn/plugins/nessus/277980
• https://cn.t00ls.com/articles-74547.html
• https://juejin.cn/post/7628854568780890146
• https://fortiguard.fortinet.com/psirt/FG-IR-25-647
• https://www.gm7.org/archives/17540
• https://www.anquanke.com/post/id/313637
• https://cn-sec.com/archives/4805802.html
• https://www.rapid7.com/db/vulnerabilities/fortios-cve-2025-59718/
• https://www.fortiguard.com/psirt/FG-IR-25-647

Related Vulnerabilities

• PoCCVE-2026-39808: Fortinet FortiSandbox - Command Injection
• Fortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞（CVE-2026-39808）
• PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL Injection
• PoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration Detection
• PoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin Privilege
• Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446/CVE-2025-58034）
• Fortinet FortiWeb 需授权 命令注入漏洞
• Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446）
• PoCFortinet FortiWeb 未授权身份验证绕过漏洞（CVE-2025-64446）
• PoCCVE-2022-42475: Fortinet SSL-VPN - Heap-Based Buffer Overflow