Is CVE-2025-43892 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-43892 being exploited in the wild.

How severe is CVE-2025-43892?

Medium severity, with a CVSS score of 4.3, published 14 July 2026.

Which products and versions are affected?

Fortinet FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions.

Is there a fix for CVE-2025-43892?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-43892 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2025-43892?

Check whether you run Fortinet FortiOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-43892: Fortinet FortiOS buffer over-read in redirect response

CVE-2025-43892 · Severity: medium · CVSS 4.3 · Published 2026-07-14

A security vulnerability exists in Fortinet FortiOS, the operating system used to manage FortiGate firewalls and network security devices. An authorized user could potentially view sensitive information stored in the device's memory by sending a specially crafted web request. This could lead to the exposure of internal system data, though it requires the attacker to already have a valid login to the system.

Technologies: Fortinet FortiOS. Vendors: Fortinet.

Quick answers

Is CVE-2025-43892 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-43892 being exploited in the wild.
How severe is CVE-2025-43892?: Medium severity, with a CVSS score of 4.3, published 14 July 2026.
Which products and versions are affected?: Fortinet FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions.
Is there a fix for CVE-2025-43892?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-43892 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2025-43892?: Check whether you run Fortinet FortiOS at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A buffer over-read vulnerability (CWE-126) exists in Fortinet FortiOS versions 7.2, 7.4, and 7.6. The flaw is triggered when the system processes a specially crafted request that results in a redirect response. An authenticated remote attacker with low privileges can exploit this to leak portions of the device's memory. The leaked memory is returned within the redirect response, potentially exposing sensitive information. Users are advised to upgrade to patched versions of FortiOS as specified by the vendor.

Affected products

Fortinet FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.8, 7.2 all versions

Timeline

2026-07-14: disclosed
2026-07-14: advisory

References

https://fortiguard.fortinet.com/psirt/

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.