FortiOS Flaws Could Bypass Firewall Logging, Access Protected Networks

Siemens ProductCERT flagged two Fortinet FortiOS vulnerabilities: CVE-2025-55018 and CVE-2025-62439. They may allow an unauthenticated actor to smuggle unlogged HTTP requests through firewall policies and allow authenticated users to gain unauthorized access to protected network resources.

Part of the PlainSec briefing for 2026-03-10

Sources

• Siemens ProductCERT
• Siemens ProductCERT
• Siemens ProductCERT
• Siemens ProductCERT