medium6.5
CVE-2025-24471
An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to…
Impact
An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortisase | Version 25.1.39 |
| Fortinet | Fortios | from 7.4.0 before 7.4.8 from 7.6.0 before 7.6.2 |