CVE-2025-67604
CVE-2025-67604 is a medium-severity vulnerability in Fortinet Fortianalyzer with a CVSS 3.x base score of 5.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-676.
Key facts
- Severity: Medium (CVSS 3.x base score 5.3)
- EPSS exploit prediction: 0% (34th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2025-209804
- Weakness: CWE-676
- Affected product: Fortinet Fortianalyzer
- Published:
- Last modified:
Description
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker.
Frequently asked questions
- What is CVE-2025-67604?
- A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker.
- How severe is CVE-2025-67604?
- CVE-2025-67604 has a CVSS 3.x base score of 5.3, rated medium severity. It is exploitable over network with high attack complexity, requires low privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
- Is CVE-2025-67604 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (34th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2025-67604?
- CVE-2025-67604 primarily affects Fortinet Fortianalyzer. In total, 2 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2025-67604?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2025-67604 have an EU (EUVD) identifier?
- Yes. CVE-2025-67604 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2025-209804.
- When was CVE-2025-67604 published?
- CVE-2025-67604 was published on 2026-05-12 and last updated on 2026-06-17.
References
Affected products (2)
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
More vulnerabilities in Fortinet Fortianalyzer
- CVE-2026-24858 — Critical (CVSS 9.8): An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet…
- CVE-2023-25610 — Critical (CVSS 9.8): A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version…
- CVE-2024-48886 — Critical (CVSS 9.0): A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15,…
- CVE-2021-32603 — High (CVSS 8.8): A server-side request forgery (SSRF) (CWE-918) vulnerability in FortiManager and FortiAnalyser GUI 7.0.0, 6.4.5 and…
- CVE-2020-12817 — High (CVSS 8.8): An improper neutralization of input vulnerability in FortiAnalyzer before 6.4.1 and 6.2.5 may allow a remote…
- CVE-2021-32589 — High (CVSS 8.1): A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and…
All CVEs affecting Fortinet Fortianalyzer →
Other CWE-676 vulnerabilities
- CVE-2021-27474 — Critical (CVSS 10.0): Rockwell Automation FactoryTalk AssetCentre v10.00 and earlier does not properly restrict all functions relating to IIS…
- CVE-2022-39063 — High (CVSS 7.5): When Open5GS UPF receives a PFCP Session Establishment Request, it stores related values for building the PFCP Session…
- CVE-2025-65117 — High (CVSS 7.4): The vulnerability, if exploited, could allow an authenticated miscreant (Process Optimization Designer User) to embed…
- CVE-2024-38434 — Medium (CVSS 6.5): Unitronics Vision PLC – CWE-676: Use of Potentially Dangerous Function may allow security feature bypass
- CVE-2024-50307 — Medium (CVSS 5.5): Use of potentially dangerous function issue exists in Chatwork Desktop Application (Windows) versions prior to 2.9.2.…
- CVE-2024-37387 — Medium (CVSS 4.0): Use of potentially dangerous function issue exists in Ricoh Streamline NX PC Client. If this vulnerability is…