What is CVE-2025-62826?

CVE-2025-62826 is a low-severity vulnerability in Fortinet Fortios, classified under HTTP Response Splitting. CVSS score: 3.1/10. Published 2026-07-14.

How severe is CVE-2025-62826?

Low severity. CVSS v3 base score is 3.1 out of 10.

Vulnerability in Fortinet Fortios

CVE-2025-62826

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 th…

CVSS v3 metric

CVSS v3 base score 3.1 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N.

Affected products

Fortinet Fortios — versions 7.6.0, 7.4.0, 7.2.0
Fortinet Fortipam — versions 1.7.0, 1.6.0, 1.5.0
Fortinet Fortiproxy — versions 7.6.0, 7.4.0, 7.2.0

Weakness classification (CWE)

CWE-113 — HTTP Response Splitting

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2025-62826?: CVE-2025-62826 is a low-severity vulnerability in Fortinet Fortios, classified under HTTP Response Splitting. CVSS score: 3.1/10. Published 2026-07-14.
How severe is CVE-2025-62826?: Low severity. CVSS v3 base score is 3.1 out of 10.