CVE-2025-22254 | Fortinet FortiWeb/FortiOS/FortiProxy Node.js Websocket Module privileges management (FG-IR-25-006)

June 10, 2025 Yanac

A vulnerability classified as critical has been found in Fortinet FortiWeb, FortiOS and FortiProxy. Affected is an unknown function of the component Node.js Websocket Module. The manipulation leads to improper privilege management.

This vulnerability is traded as CVE-2025-22254. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More