Security Advisory

CVE-2025-24471

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-06-10 16:36:18
Last updated 2026-07-14 12:40:56
Assigner fortinet
CVSS score 6.0
State PUBLISHED

Description

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.