imPC@ndo IT

Tracker / CVE-2025-24471

CVE-2025-24471

Medium 6.5

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.

Affected products and versions

fortinet fortios · 7.4.0 → 7.4.8
fortinet fortios · 7.6.0 → 7.6.2
fortinet fortisase

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References