← Database

CVE-2025-24471

MEDIUM CVSS: 6.5 Published: 2025-06-10 Modified: 2026-06-17

Description

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.

Affected Platforms

Fortinet FortiosFortinet Fortisase

Weakness Type

CWE-295

References