CVE-2024-54021

score

<0.1

cvss

6.5

epss

0.8%

published

2025-01-14

kev added

—

first seen

2026-10-21

Fortinet FortiOS 7.2.0 through 7.6.0 and FortiProxy 7.2.0 through 7.4.5 contain an HTTP response splitting vulnerability caused by improper neutralization of CRLF sequences in HTTP headers, letting attackers execute arbitrary code or commands via crafted HTTP headers, exploit requires sending malicious HTTP headers.