Is CVE-2025-31514 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-31514 being exploited in the wild.

How severe is CVE-2025-31514?

Low severity, with a CVSS score of 2.7, published 14 October 2025.

Which products and versions are affected?

Fortinet FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions; Fortinet FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions; Siemens Ruggedcom Ape1808 All versions with Fortinet NGFW < V7.6.6.

Is there a fix for CVE-2025-31514?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-31514 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2025-31514?

Check whether you run Fortinet FortiOS, Fortinet FortiProxy or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-31514: Fortinet FortiOS sensitive information disclosure in logs

Q: Is there a fix for CVE-2025-31514?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2025-31514 attacked?

It is attacked over the network, in an operating system.

Q: Am I affected by CVE-2025-31514?

Check whether you run Fortinet FortiOS, Fortinet FortiProxy or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-31514 · Severity: low · CVSS 2.7 · Published 2025-10-14

FortiOS and FortiProxy are operating systems used in Fortinet firewalls and web proxies to secure corporate networks. A vulnerability in these systems could allow an administrator with limited access to view sensitive two-factor authentication (2FA) information. While this does not allow direct outside access, it could be used by a malicious insider to compromise additional security layers.

Technologies: Fortinet FortiOS, Fortinet FortiProxy, Siemens Ruggedcom Ape1808. Vendors: Fortinet, Siemens.

Quick answers

Is CVE-2025-31514 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-31514 being exploited in the wild.
How severe is CVE-2025-31514?: Low severity, with a CVSS score of 2.7, published 14 October 2025.
Which products and versions are affected?: Fortinet FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions; Fortinet FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions; Siemens Ruggedcom Ape1808 All versions with Fortinet NGFW < V7.6.6.
Is there a fix for CVE-2025-31514?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-31514 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2025-31514?: Check whether you run Fortinet FortiOS, Fortinet FortiProxy or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An Insertion of Sensitive Information into Log File vulnerability (CWE-532) exists in the GUI component of FortiOS and FortiProxy. The vulnerability allows an authenticated attacker with at least read-only privileges to retrieve sensitive 2FA-related information by observing system logs or executing specific 'diagnose' commands. The attack vector is network-based, but requires high privileges (PR:H) according to the vendor's CVSS assessment. This could lead to the disclosure of secrets used for multi-factor authentication. Users are advised to upgrade to FortiOS/FortiProxy version 7.6.4 or higher, or migrate to a fixed release for older branches.

Affected products

Fortinet FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions
Fortinet FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions
Siemens RUGGEDCOM APE1808 All versions with Fortinet NGFW < V7.6.6

Timeline

2025-10-14: advisory: Initial publication by Fortinet
2025-10-14: disclosed
2025-05-13: other: Siemens advisory publication (pre-dates specific CVE disclosure)

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.