Summary
generated automatically from NVD dataFortinet FortiOS, the operating system of FortiGate devices, contains a flaw in its FTP proxy module that lets remote attackers evade anti-virus scanning by using Enhanced Passive (EPSV) FTP mode. According to the NVD description, the issue affects releases before 2.80 MR12 and 3.0 MR2. It carries a CVSS v2.0 score of 5.0 (MEDIUM), with a network attack vector, low complexity, no authentication required, and a partial impact on availability.
NVD description
The FTP proxy module in Fortinet FortiOS (FortiGate) before 2.80 MR12 and 3.0 MR2 allows remote attackers to bypass anti-virus scanning via the Enhanced Passive (EPSV) FTP mode.
EPSS · FIRST.org
1.8%probability of exploitation in the next 30 days
Higher than 78% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-29, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 24 juin 2006
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (14)
- http://secunia.com/advisories/20720PatchVendor Advisory
- http://secunia.com/advisories/20720PatchVendor Advisory
Similar CVEs
Other vulnerabilities of type
Running FortiGate firewalls? Know which CVEs hit your version.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.