AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-47890

LOW · CVSS 2.6 EPSS 0.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-10-14 · Last synced 2026-08-04

CyberRota Analysis

This is a low severity vulnerability with a CVSS score of 2.6. It affects Fortinet, FortiOS. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-47890
Severity
LOW
CVSS
2.6
EPSS
0.24%
Fortinet FortiOS

Original NVD Description

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSASE 25.2.a may allow an unauthenticated attacker to perform an open redirect attack via crafted HTTP requests.

Related CVEs

Other vulnerabilities affecting the same vendor(s)