CVE-2025-24471

No fix known EPSS <1%CVSS 6.0

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClient via revoked certificate.

Published 2025-06-10 · CVE record · OSV

Products: Fortinet FortiOS, Siemens RUGGEDCOM APE1808