CVE-2025-22252

score

<0.1

cvss

9.8

epss

0.9%

published

2025-05-28

kev added

—

first seen

2026-10-21

Fortinet FortiProxy 7.6.0 through 7.6.1, FortiSwitchManager 7.2.5, and FortiOS 7.4.4 through 7.4.6 and 7.6.0 contain an authentication bypass caused by missing authentication for critical functions, letting attackers with knowledge of an admin account access the device as valid admins, exploit requires existing admin credentials.