An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7…
- Severity
- High7.5CVSS 3.1, High
- Known exploited
- Not listed
- Exploit prediction
- 1%
- Published
- 14 May 2024Updated 17 Jun 2026 · Last verified 29 Sept 2026
Known remediation
Fixed releases per branch, as the vendor states them. Patcharo never infers a fix.
Fortinet FortiOS
Vendor advisory- 7.4No fix published
Workaround / Vendor remediation
Vendor remediation · FortiOS
Please upgrade to FortiOS version 7.4.2 or above
Description
Title, description and vendor guidance are quoted from the source records.
An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service on the administrative interface via crafted HTTP requests.
Weakness: CWE-703
Known exploited
Not listed in CISA KEV as of the last check.
Exploit prediction
1% probability of exploitation in the next 30 days (percentile 66%).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
What the source states, per branch
Versions matched by Patcharo
Fortinet FortiOSSource: Fortinet (CVE record)
| Branch | Affected | Fixed in |
|---|---|---|
| 7.4 | Exact releases: 7.4.1 |
Versions not listed are stated unaffected by the vendor.
References
Provenance
Every fact on this page comes from the sources below. Nothing is written by an AI.
- Fortinet (CVE record)
- Fortinet (CVE record) · 29 Sept 2026 at 02:15 UTC · Parser patcharo-cve5/1.1.0
- NVD
- NVD · 27 Sept 2026 at 23:44 UTC · Parser patcharo-nvd/1.0.0
- FIRST EPSS
- FIRST EPSS · 30 Sept 2026 at 00:17 UTC · Parser patcharo-epss/1.0.0
Last verified: 29 Sept 2026 at 02:15 UTC