CVE-2025-55018 – Fortinet FortiOS HTTP Request Smuggling Vulnerability

CVE ID : CVE-2025-55018

Published : Feb. 10, 2026, 3:39 p.m. | 42 minutes ago

Description : An inconsistent interpretation of http requests (‘http request smuggling’) vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request through the firewall policies via a specially crafted header

Severity: 5.2 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…