FortiProxy 7.2 vulnerabilities
15 advisories affect Fortinet FortiProxy 7.2, 6 already exploited by attackers. Latest: October 16, 2026.
Running FortiProxy 7.2 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiProxy 7.2 alerts
Turn on FortiProxy 7.2 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · October 16, 2026 | Medium 6 Exploited | from 7.2.0 to 7.2.16 |
| Fortinet: Double free in signal handler FG-IR-26-182 · October 13, 2026 | Low 2.1 | all versions 7.2 |
| Fortinet: Null Pointer Dereference in Log Report FG-IR-26-173 · September 8, 2026 | Low 2.5 | all versions 7.2 |
| Fortinet: SSL-VPN Reflected XSS FG-IR-26-150 · July 14, 2026 | Medium 6.1 | from 7.2.0 to 7.2.9 Fixed in 7.2.10 |
| Fortinet: Stack Buffer Overflow in Log Report FG-IR-26-148 · July 14, 2026 | Medium 5.9 | all versions 7.2 |
| Fortinet: Path traversal in CLI command allows deletion of root file system FG-IR-26-151 · July 14, 2026 | Medium 5.5 | all versions 7.2 |
| Fortinet: Buffer overread in authd and wad daemon FG-IR-26-154 · July 14, 2026 | Medium 4.3 | all versions 7.2 |
| Fortinet: Header injection in Web Filter warning page FG-IR-26-152 · July 14, 2026 | Low 3.4 | all versions 7.2 |
| Fortinet: Header injection in captive portal authentication form FG-IR-26-153 · July 14, 2026 | Low 3.1 | all versions 7.2 |
| Fortinet: Restricted CLI escape using Lua FG-IR-26-143 · June 9, 2026 | Medium 6.7 | from 7.2.0 to 7.2.14 Fixed in 7.2.15 |
| Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability CVE-2026-24858 · January 27, 2026 | Critical 9.8 Exploited | from 7.2.0 to 7.2.15 |
| Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability CVE-2025-59718 · December 16, 2025 | Critical 9.8 Exploited | from 7.2.0 to 7.2.14 |
| Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2025-24472 · March 18, 2025 | High 8.1 Exploited | from 7.2.0 to 7.2.12 |
| Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability CVE-2024-55591 · January 14, 2025 | Critical 9.8 Exploited | from 7.2.0 to 7.2.12 |
| Fortinet Multiple Products Format String Vulnerability CVE-2024-23113 · October 9, 2024 | Critical 9.8 Exploited | from 7.2.0 to 7.2.8 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.