SSLVPN Improper Certificate Validation
CVSSv3 Score: 7.7 An improper certificate validation vulnerability [CWE-295] in FortiOS SSLVPN may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the SSLVPN web portal and the backend destination website. Revised on 2026-11-12 00:00:00
Read at Fortinet PSIRT Advisories
- Vendor
- Fortinet
- Product
- FortiOS / FortiGate
- CVSS v3.0
- 7.7
- Exposure class
- Edge / VPN / firewall
Why it ranks 38 (Notable)
- CVSS v3.0 7.7 high
- Exposed product class: edge / VPN / firewall
- Widely deployed vendor product (Fortinet)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Fortinet PSIRT Advisories (fortiguard.fortinet.com)