Vulnetix
Try Vulnetix Request Demo
CVE-2026-22153 PUBLISHED CVSS 5.199999809265137 MEDIUM

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

EPSS 0.06% · 18.2th percentile

Risk Scores

CVSS v3.1
5.199999809265137
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C
EPSS Score
0.06%
18.2th percentile

Affected Products

VendorProductVersions
FortinetFortiOS7.6.0, 7.4.0, 7.2.0

Timeline

References

Open in Interactive Console →