CVE-2024-26008: Fortinet FortiProxy · Denial of Service
Affects Fortinet FortiProxySource CVE Database V5
Public exploit available · CVSS 5.0 Medium.
Data as of 26 Oct 2026, 14:05 UTC
- EPSS
- 0.5% chance of exploitation in 30 days – higher than 47% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:CExploitation evidence
Disclosed: evidence found.
CVE published 14 Oct 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: evidence found.
CVSS exploit maturity: proof of concept public
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), CVSS vector, the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Fortinet FortiProxy | Affected
| Fixed in– |
AI-suggested
- Monitor Fortinet’s official advisories and apply patches or firmware updates as soon as they become available for the affected Fortinet products and versions.
- Implement network-level protections such as rate limiting and anomaly detection on SSL-encrypted TCP traffic targeting Fortinet management interfaces to detect and block suspicious fgfm connection reset attempts.
- Restrict access to Fortinet management interfaces (fgfm daemon) to trusted internal networks or VPNs, minimizing exposure to unauthenticated external attackers.
- Employ robust network segmentation to isolate critical Fortinet devices from general user traffic and potential attack sources.
- Enable detailed logging and monitoring of fgfm connections to identify unusual reset patterns indicative of exploitation attempts.
- Conduct regular vulnerability assessments and penetration testing focused on Fortinet infrastructure to verify the effectiveness of mitigations.
- Prepare incident response plans specifically addressing potential denial of service scenarios affecting Fortinet devices to ensure rapid recovery and continuity.
Description
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and FortiSwitchManager version 7.2.0 through 7.2.3 and version 7.0.0 through 7.0.3 fgfm daemon may allow an unauthenticated attacker to repeatedly reset the fgfm connection via crafted SSL encrypted TCP requests.