# CVE-2025-31514: Fortinet FortiOS sensitive information disclosure in logs

Source: https://junglewise.ai/threats/cve-2025-31514-fortinet-fortios-sensitive-information-disclosure-in-logs  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-14. Updated: 2026-06-09  
License: CC BY 4.0 with a link back

CVE-2025-31514 · Severity: low · CVSS 2.7 · Published 2025-10-14

FortiOS and FortiProxy are operating systems used in Fortinet firewalls and web proxies to secure corporate networks. A vulnerability in these systems could allow an administrator with limited access to view sensitive two-factor authentication (2FA) information. While this does not allow direct outside access, it could be used by a malicious insider to compromise additional security layers.

Technologies: [Fortinet FortiOS](https://junglewise.ai/threats/technologies/fortios), [Fortinet FortiProxy](https://junglewise.ai/threats/technologies/fortiproxy), [Siemens Ruggedcom Ape1808](https://junglewise.ai/threats/technologies/ruggedcom-ape1808). Vendors: [Fortinet](https://junglewise.ai/threats/vendors/fortinet), [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2025-31514 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-31514 being exploited in the wild.

**How severe is CVE-2025-31514?** Low severity, with a CVSS score of 2.7, published 14 October 2025.

**Which products and versions are affected?** Fortinet FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions; Fortinet FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions; Siemens Ruggedcom Ape1808 All versions with Fortinet NGFW < V7.6.6.

**Is there a fix for CVE-2025-31514?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2025-31514 attacked?** It is attacked over the network, in an operating system.

**Am I affected by CVE-2025-31514?** Check whether you run Fortinet FortiOS, Fortinet FortiProxy or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An Insertion of Sensitive Information into Log File vulnerability (CWE-532) exists in the GUI component of FortiOS and FortiProxy. The vulnerability allows an authenticated attacker with at least read-only privileges to retrieve sensitive 2FA-related information by observing system logs or executing specific 'diagnose' commands. The attack vector is network-based, but requires high privileges (PR:H) according to the vendor's CVSS assessment. This could lead to the disclosure of secrets used for multi-factor authentication. Users are advised to upgrade to FortiOS/FortiProxy version 7.6.4 or higher, or migrate to a fixed release for older branches.

## Affected products

- Fortinet FortiOS 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions, 6.4 all versions
- Fortinet FortiProxy 7.6.0 through 7.6.3, 7.4 all versions, 7.2 all versions, 7.0 all versions
- Siemens RUGGEDCOM APE1808 All versions with Fortinet NGFW < V7.6.6

## Timeline

- 2025-10-14: advisory: Initial publication by Fortinet
- 2025-10-14: disclosed
- 2025-05-13: other: Siemens advisory publication (pre-dates specific CVE disclosure)

## References

- [https://fortiguard.fortinet.com/psirt/FG-IR-24-452](https://fortiguard.fortinet.com/psirt/FG-IR-24-452)
- [https://cert-portal.siemens.com/productcert/html/ssa-864900.html](https://cert-portal.siemens.com/productcert/html/ssa-864900.html)

## Related threats

- [Fortinet FortiOS authentication bypass in HA command execution](https://junglewise.ai/threats/cve-2026-126259-a-missing-authentication-for-critical-function-vulnerability-in)
- [Fortinet FortiOS stack buffer overflow in WAD proxy](https://junglewise.ai/threats/cve-2026-126258-a-stack-based-buffer-overflow-vulnerability-in-fortinet-fortios)
- [Fortinet FortiOS out-of-bounds read in kernel](https://junglewise.ai/threats/cve-2026-126256-a-out-of-bounds-read-vulnerability-in-fortinet-fortios-8-0-0)
- [Fortinet FortiOS path traversal authentication bypass in SSH daemon](https://junglewise.ai/threats/cve-2026-126255-a-path-traversal-filedir-vulnerability-in-fortinet-fortios-8-0-0)
- [Fortinet FortiOS numeric truncation error in BGP daemon](https://junglewise.ai/threats/cve-2026-126254-a-numeric-truncation-error-vulnerability-in-fortinet-fortios-8-0)