CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass

Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability. Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.

• CISA KEV-listed (remediation due 2025-04-08)
• used in ransomware campaigns
• EPSS 7.2% (94.2% percentile)
• CVSS 8.1 high

Related briefings

• FBI and CISA warn of Gunra ransomware hitting hospitals 2026-08-10

Linked threat actors

• Gunra machine-inferred link

Browse the CVE database

Read the full analysis on IntelFusions