CVE-2025-62439

MediumCVSS 4.2/10Last modified Jun 17, 2026

Description

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations to gain unauthorized access to protected network resources via crafted requests.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-940

Affected software

No affected versions have been published.

Timeline

Published
Feb 10, 2026
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-62445.4The Essential Addons for Elementor – Popular Elementor Templates and Widgets plugin for WordPress is vulnerable to Stored Cross-Site ScriptiCVE-2025-624496.8Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorCVE-2025-624528.0Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.CVE-2025-624535.0Improper validation of generative ai output in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security featCVE-2025-624547.8Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2025-624557.8Improper input validation in Windows Message Queuing allows an authorized attacker to elevate privileges locally.CVE-2025-624568.8Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to execute code over a network.CVE-2025-624577.8Out-of-bounds read in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2025-624587.8Heap-based buffer overflow in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally.CVE-2025-624596.1Microsoft Defender Portal Spoofing VulnerabilityCVE-2025-624617.8Buffer over-read in Windows Projected File System Filter Driver allows an authorized attacker to elevate privileges locally.CVE-2025-624627.8Buffer over-read in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2025-62439: Medium severity, CVSS 4.2 | Vulnix