CVE-2025-46775

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - psirt@fortinet.com

Published

2025-11-18

Last modified

2026-10-18

Weaknesses

CWE-1295

Affected products

• Fortiextender (Fortinet)
• Fortiextender Firmware (Fortinet)

References

• https://fortiguard.fortinet.com/psirt/FG-IR-25-259