Unrated severityNVD Advisory· Published Aug 12, 2025· Updated Feb 26, 2026

CVE-2023-45584

Description

A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.1, FortiProxy 7.2.0 through 7.2.7, FortiProxy 7.0.0 through 7.0.13 allows a privileged attacker to execute code or commands via crafted HTTP or HTTPs requests.

Affected products

Fortinet/Fortiproxyv5
cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:*
Range: 7.4.0
Fortinet/Fortiosv5
cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*
Range: 7.4.0
Fortinet/Fortipamv5
cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:*
Range: 1.1.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

fortiguard.fortinet.com/psirt/FG-IR-23-209mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000