CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.8. It affects Fortinet, FortiOS. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-55018
Severity
MEDIUM
CVSS
5.8
EPSS
0.35%
Fortinet FortiOS
Original NVD Description
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header
Related CVEs
Other vulnerabilities affecting the same vendor(s)