Is CVE-2025-55018 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-55018 being exploited in the wild.

How severe is CVE-2025-55018?

Medium severity, with a CVSS score of 5.8, published 10 February 2026.

Which products and versions are affected?

Fortinet FortiOS 7.6.0, 7.4.0 through 7.4.9, 7.2 all versions, 7.0 all versions, 6.4.3 through 6.4.16; Siemens Ruggedcom Ape1808 All versions with Fortinet NGFW < V7.4.10.

Is there a fix for CVE-2025-55018?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-55018 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2025-55018?

Check whether you run Fortinet FortiOS or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-55018: Fortinet FortiOS HTTP request smuggling in firewall policies

Q: Is there a fix for CVE-2025-55018?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

Q: How is CVE-2025-55018 attacked?

It is attacked over the network, in an operating system.

Q: Am I affected by CVE-2025-55018?

Check whether you run Fortinet FortiOS or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-55018 · Severity: medium · CVSS 5.8 · Published 2026-02-10

A vulnerability in Fortinet's firewall operating system could allow an unauthorized person to bypass security policies. By sending specially crafted web traffic, an attacker can 'smuggle' hidden requests that the firewall fails to log or inspect properly. This could allow malicious commands to reach internal web servers that were intended to be protected.

Technologies: Fortinet FortiOS, Siemens Ruggedcom Ape1808. Vendors: Fortinet, Siemens.

Quick answers

Is CVE-2025-55018 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-55018 being exploited in the wild.
How severe is CVE-2025-55018?: Medium severity, with a CVSS score of 5.8, published 10 February 2026.
Which products and versions are affected?: Fortinet FortiOS 7.6.0, 7.4.0 through 7.4.9, 7.2 all versions, 7.0 all versions, 6.4.3 through 6.4.16; Siemens Ruggedcom Ape1808 All versions with Fortinet NGFW < V7.4.10.
Is there a fix for CVE-2025-55018?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-55018 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2025-55018?: Check whether you run Fortinet FortiOS or Siemens Ruggedcom Ape1808 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An inconsistent interpretation of HTTP requests (HTTP Request Smuggling, CWE-444) exists in FortiOS. The vulnerability is triggered when the firewall processes specially crafted HTTP headers, leading to a discrepancy in how the firewall and the backend server define request boundaries. This issue specifically affects configurations using Virtual IPs (VIP) to forward traffic to HTTP/1.1 servers. An unauthenticated remote attacker can exploit this to smuggle requests past firewall security policies, potentially leading to unauthorized command execution on backend systems or bypassing access controls. Patches are available in FortiOS versions 7.6.1, 7.4.10, and subsequent releases.

Affected products

Fortinet FortiOS 7.6.0, 7.4.0 through 7.4.9, 7.2 all versions, 7.0 all versions, 6.4.3 through 6.4.16
Siemens RUGGEDCOM APE1808 All versions with Fortinet NGFW < V7.4.10

Timeline

2026-02-10: disclosed: Initial publication by Fortinet
2026-02-10: advisory: Fortinet advisory FG-IR-25-667 published
2026-02-26: other: Impact details updated by vendor
2026-03-10: advisory: Siemens published advisory SSA-975644 for RUGGEDCOM devices

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.