CVE-2025-67862
Medium · 6.7CVSS
6.7
EPSS
0.1%
Published
Jun 9, 2026
CISA due date
—
The record
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-8989 Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the… CWE-1244
- CVE-2026-29642 A local attacker who can execute privileged CSR operations (or can induce firmware to do… CWE-1244
- CVE-2025-36755 The CleverDisplay BlueOne hardware player is designed with its USB interfaces physically… CWE-1244
- CVE-2025-42878 SAP Web Dispatcher and ICM may expose internal testing interfaces that are not intended… CWE-1244