Back to vendor advisories
Fortinet PSIRT AdvisoriesFG-IR-25-545

Trusted hosts bypass via SSH

LowVendor CVSS 1.8 / 10 0 CVEs Published Nov 18, 2025 at 8:00 AM UTC

Summary

CVSSv3 Score: 1.8 An Improper Privilege Management vulnerability [CWE-269] in FortiOS, FortiProxy and FortiPAM may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command. Revised on 2026-05-27 00:00:00

Products covered

  • FortiOS

  • FortiProxy

  • FortiPAM

Remediation

Separate remediation guidance was not included in the collected bulletin.

CVEs in this advisory 0

No CVE identifiers were listed in the collected bulletin.

Updates

  1. Published by Fortinet

    The publication date reported by the vendor.

  2. Updated by Fortinet

    The vendor changed the advisory after it was first published.

  3. Added to SecurityAlert

    We collected the advisory from the official source.

  4. Confirmed at the source

    Our collector saw this advisory during a later source check.