Vulnerabilities · 234 days ago

FortiOS flaws could bypass firewall logging, access protected networks

Siemens ProductCERT flagged two Fortinet FortiOS vulnerabilities: CVE-2025-55018 and CVE-2025-62439. They may allow an unauthenticated actor to smuggle unlogged HTTP requests through firewall policies and allow authenticated users to gain unauthorized access to protected network resources.

Timeline

• Mar 10 Reported by Siemens ProductCERT

Sources

1 source covering this story

• Siemens ProductCERT Mar 10

  SSA-027652

  As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.

• Siemens ProductCERT Mar 10

  SSA-770770

  Siemens has identified the following specific mitigations that customers can apply to reduce the risk: Product-specific remediations or mitigations can be found in the section Known Affected Products.

• Siemens ProductCERT Mar 10

  SSA-975644

  As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.

• Siemens ProductCERT Mar 10

  SSA-452276

  Siemens has identified the following specific mitigations that customers can apply to reduce the risk: Product-specific remediations or mitigations can be found in the section Known Affected Products.

Entities

• CVE-2025-55018
• CVE-2025-62439

Vendor digest: Fortinet

Part of the PlainSec briefing for 2026-03-10

Editions

• Briefing for 2026-03-10

Related stories

• UAT-8616 activity affects Cisco Catalyst SD-WAN Controller
• Attackers weaponize new RCEs to compromise cloud environments
• March Patch Tuesday fixes critical Microsoft cloud vulnerabilities