What is CVE-2025-46775?

CVE-2025-46775 is a medium-severity vulnerability in Fortinet Fortiextender, classified under CWE-1295. CVSS score: 5.5/10. Published 2025-11-18.

How severe is CVE-2025-46775?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Fortinet Fortiextender

CVE-2025-46775

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.

EPSS: 0.002 (5.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Fortinet Fortiextender — versions 7.6.0, 7.4.0, 7.2.0
Fortinet Fortiextender_firmware

Weakness classification (CWE)

CWE-1295

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-46775?: CVE-2025-46775 is a medium-severity vulnerability in Fortinet Fortiextender, classified under CWE-1295. CVSS score: 5.5/10. Published 2025-11-18.
How severe is CVE-2025-46775?: Medium severity. CVSS v3 base score is 5.5 out of 10.