Is CVE-2025-62675 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2025-62675 being exploited in the wild.

How severe is CVE-2025-62675?

Low severity, with a CVSS score of 3.4, published 14 July 2026.

Which products and versions are affected?

Fortinet FortiOS 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions; Fortinet FortiProxy 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions.

Is there a fix for CVE-2025-62675?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2025-62675 attacked?

It is attacked over the network, in an operating system.

Am I affected by CVE-2025-62675?

Check whether you run Fortinet FortiOS or Fortinet FortiProxy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2025-62675: Fortinet FortiOS and FortiProxy HTTP response splitting in Web Filter

CVE-2025-62675 · Severity: low · CVSS 3.4 · Published 2026-07-14

Fortinet FortiOS and FortiProxy, which are used to manage and secure corporate network traffic, contain a security flaw in their web filtering component. An attacker could trick a user into clicking a malicious link to inject unauthorized information into the user's web session. While this requires the attacker to possess a specific security token and involves user interaction, it could be used to bypass certain security controls or mislead users.

Technologies: Fortinet FortiOS, Fortinet FortiProxy. Vendors: Fortinet.

Quick answers

Is CVE-2025-62675 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2025-62675 being exploited in the wild.
How severe is CVE-2025-62675?: Low severity, with a CVSS score of 3.4, published 14 July 2026.
Which products and versions are affected?: Fortinet FortiOS 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions; Fortinet FortiProxy 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions.
Is there a fix for CVE-2025-62675?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2025-62675 attacked?: It is attacked over the network, in an operating system.
Am I affected by CVE-2025-62675?: Check whether you run Fortinet FortiOS or Fortinet FortiProxy at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An HTTP Response Splitting vulnerability (CWE-113) exists in the Web Filter warning page of Fortinet FortiOS and FortiProxy. The flaw is caused by improper neutralization of CRLF sequences in HTTP headers. An attacker who possesses a valid web filter override token can exploit this by tricking a user into clicking a specially crafted link, leading to the injection of arbitrary headers. This is categorized as a low-severity issue due to the requirement for a valid token and user interaction (UI:R). Patches are available in FortiOS/FortiProxy versions 7.6.5 and above; users on 7.4 and 7.2 branches are advised to migrate to a fixed release.

Affected products

Fortinet FortiOS 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions
Fortinet FortiProxy 7.6.0 through 7.6.4, 7.4 all versions, 7.2 all versions

Timeline

2026-07-14: advisory: Initial publication by Fortinet
2026-07-14: disclosed

References

https://fortiguard.fortinet.com/psirt/FG-IR-26-152

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.