CVE-2025-62826

MediumCVSS 4.3/10Last modified Sep 29, 2026

Description

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-113

Affected software

VendorProductVersions
FortinetFortiPAM1.7.0; >= 1.6.0, <= 1.6.2; >= 1.5.0, <= 1.5.1; >= 1.4.0, <= 1.4.3; >= 1.3.0, <= 1.3.1; 1.2.0; >= 1.1.0, <= 1.1.2; >= 1.0.0, <= 1.0.3
FortinetFortiProxy>= 7.6.0, <= 7.6.4; >= 7.4.0, <= 7.4.14; >= 7.2.0, <= 7.2.16; >= 7.0.0, <= 7.0.23
FortinetFortiOS>= 7.6.0, <= 7.6.2; >= 7.4.0, <= 7.4.8; >= 7.2.0, <= 7.2.13; >= 7.0.0, <= 7.0.19; >= 6.4.0, <= 6.4.16
SiemensRUGGEDCOM APE1808< *

References

Timeline

Published
Jul 14, 2026
Last modified
Sep 29, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-62837.5A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the fileCVE-2025-628398.7An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploitCVE-2025-62844.3A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code.CVE-2025-628403.3A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attCVE-2025-628418.7An use of hard-coded cryptographic key vulnerability has been reported to affect HBS 3 Hybrid Backup Sync and Hybrid Backup Sync. If exploitCVE-2025-628427.8An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local netwCVE-2025-628436.8An improper restriction of communication channel to intended endpoints vulnerability has been reported to affect QHora. If an attacker gainsCVE-2025-628445.5A weak authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the CVE-2025-628456.7An improper neutralization of escape, meta, or control sequences vulnerability has been reported to affect QHora. If a local attacker gains CVE-2025-628466.7An SQL injection vulnerability has been reported to affect QHora. If a local attacker gains an administrator account, they can then exploit CVE-2025-628477.5An improper neutralization of argument delimiters in a command vulnerability has been reported to affect several QNAP operating system versiCVE-2025-628487.5A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then e
CVE-2025-62826: Medium severity, CVSS 4.3 | Vulnix