---
id: CVE-2025-67862
title: >-
  An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability
  [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS
  7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through
  7.0.16, Fort…
summary: >-
  An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability
  [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS
  7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through
  7.0.16, Fort…
severity: medium
cvss: 6
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-1244
vendor: Fortinet
product: FortiOS
affected:
  - FortiOS >= 7.6.0 <= 7.6.1
  - FortiOS >= 7.4.0 <= 7.4.6
  - FortiOS >= 7.2.0 <= 7.2.10
  - FortiOS >= 7.0.0 <= 7.0.16
  - FortiOS >= 6.4.0 <= 6.4.16
  - FortiProxy >= 7.6.0 <= 7.6.3
  - FortiProxy >= 7.4.0 <= 7.4.10
  - FortiProxy >= 7.2.0 <= 7.2.14
  - FortiProxy >= 7.0.0 <= 7.0.23
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-06-09T00:00:00+00:00'
published: '2026-06-09'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:09:36.331Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-67862'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-143'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-26-143'
tags:
  - cve.org
epss: 0.00149
epssPercentile: 0.03691
ingestedAt: '2026-10-15T05:52:46.066Z'
---

## Overview

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

## Affected

- `FortiOS >= 7.6.0 <= 7.6.1`
- `FortiOS >= 7.4.0 <= 7.4.6`
- `FortiOS >= 7.2.0 <= 7.2.10`
- `FortiOS >= 7.0.0 <= 7.0.16`
- `FortiOS >= 6.4.0 <= 6.4.16`
- `FortiProxy >= 7.6.0 <= 7.6.3`
- `FortiProxy >= 7.4.0 <= 7.4.10`
- `FortiProxy >= 7.2.0 <= 7.2.14`
- `FortiProxy >= 7.0.0 <= 7.0.23`

## Remediation

Upgrade to FortiOS version 7.6.3 or above
Upgrade to FortiOS version 7.4.8 or above
Upgrade to FortiOS version 7.2.11 or above
Upgrade to FortiOS version 7.0.17 or above
Upgrade to FortiProxy version 7.6.4 or above
Upgrade to FortiProxy version 7.4.11 or above
Upgrade to FortiProxy version 7.2.15 or above