SB20251014102 - Improper Check or Handling of Exceptional Conditions in Fortinet products
Published: October 14, 2025
Security Bulletin ID
SB20251014102
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2024-26008)
The vulnerability allows a remote non-authenticated attacker to perform service disruption.
The vulnerability exists due to improper check or handling of exceptional conditions of the connection. An unauthenticated attacker can repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.
Remediation
Install update from vendor's website.