Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ll Debian Operating System are affected. Users should upgrade to version 1.2.0 of Actualizer. Existing OS deployment requires manual password changes against the alpha and root accounts. The change will deploy's Debian's yescript overriding the older SHA512 hash created by OpenSSL. As a workaround, users need to reset both `root` and "Alpha" users' passwords. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ChewKeanHo/Actualizer/security/advisories/GHSA-v626-chv9-v9qr - https://github.com/ChewKeanHo/Actualizer/issues/1 - https://github.com/openssl/openssl/issues/19340 - https://github.com/ChewKeanHo/Actualizer/commit/32c9cc232c856f078f8269fba80ce7562bbff86b
/openssl/openssl/issues/19340 - https://github.com/ChewKeanHo/Actualizer/commit/32c9cc232c856f078f8269fba80ce7562bbff86b - https://cheatsheetseries.owasp.org/cheatsheets/Password_Storage_Cheat_Sheet.html - https://github.com/ChewKeanHo/Actualizer/releases/tag/v1.2.0 - https://www.reddit.com/r/debian/comments/1kknzqi/actualizer_v110_upgraded
CVE ID: CVE-2025-47277 State: PUBLISHED Published: 2025-05-20T17:32:27.034Z Last Updated: 2025-05-20T17:52:31.274Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: vllm-project Products: vllm Problem Types: CWE-502 Description: vLLM, an inference and serving engine for large language models (LLMs), has an issue in versions 0.6.5 through 0.8.4 that ONLY impacts environments using the `PyNcclPipe` KV cache transfer integration with the V0 engine. No other configurations are affected. vLLM supports the use of the `PyNcclPipe` class to establish a peer-to-peer communication domain for data transmission between distributed nodes. The GPU-side KV-Cache transmissi
sh a peer-to-peer communication domain for data transmission between distributed nodes. The GPU-side KV-Cache transmission is implemented through the `PyNcclCommunicator` class, while CPU-side control message passing is handled via the `send_obj` and `recv_obj` methods on the CPU side.​ The intention was that this interface should only be exposed to a private network using the IP address specified by the `--kv-ip` CLI parameter. The vLLM documentation covers how this must be limited to a secured network. The default and intentional behavior from PyTorch is that the `TCPStore` interface listens on ALL interfaces, regardless of what IP address is provided. The IP address given was only used as
e` interface listens on ALL interfaces, regardless of what IP address is provided. The IP address given was only used as a client-side address to use. vLLM was fixed to use a workaround to force the `TCPStore` instance to bind its socket to a specified private interface. As of version 0.8.5, vLLM limits the `TCPStore` socket to the private interface as configured. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vllm-project/vllm/security/advisories/GHSA-hjq4-87xh-g4fv - https://github.com/vllm-project/vllm/pull/15988 - https://github.com/vllm-project/vllm/commit/0d6e187e88874c39cda7409cf673f9e6546893e7 - https://docs.vllm.ai/en/latest/deployment/security.h
vllm-project/vllm/commit/0d6e187e88874c39cda7409cf673f9e6546893e7 - https://docs.vllm.ai/en/latest/deployment/security.html
CVE ID: CVE-2025-47278 State: PUBLISHED Published: 2025-05-13T15:57:40.409Z Last Updated: 2025-05-13T20:14:09.702Z Vendors: pallets Products: flask Problem Types: CWE-683 Description: Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the `itsdangerous` library. A list of keys can be passed, and it expects the last (top) key in the list to be the most recent key, and uses that for signing. Flask was incorrectly constructing that list in reverse, passing the signing key first. Sites that have
hat for signing. Flask was incorrectly constructing that list in reverse, passing the signing key first. Sites that have opted-in to use key rotation by setting `SECRET_KEY_FALLBACKS` care likely to unexpectedly be signing their sessions with stale keys, and their transition to fresher keys will be impeded. Sessions are still signed, so this would not cause any sort of data integrity loss. Version 3.1.1 contains a patch for the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pallets/flask/security/advisories/GHSA-4grg-w6v8-c28g - https://github.com/pallets/flask/commit/73d6504063bfa00666a92b07a28aaf906c532f09 - https://github.com/pallets/flask/relea
ttps://github.com/pallets/flask/commit/73d6504063bfa00666a92b07a28aaf906c532f09 - https://github.com/pallets/flask/releases/tag/3.1.1
CVE ID: CVE-2025-47279 State: PUBLISHED Published: 2025-05-15T17:16:02.738Z Last Updated: 2025-05-16T13:44:28.438Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: nodejs Products: undici Problem Types: CWE-401 Description: Undici is an HTTP/1.1 client for Node.js. Prior to versions 5.29.0, 6.21.2, and 7.5.0, applications that use undici to implement a webhook-like system are vulnerable. If the attacker set up a server with an invalid certificate, and they can force the application to call the webhook repeatedly, then they can cause a memory leak. This has been patched in versions 5.29.0, 6.21.2, and 7.5.0. As a workaound, avoid calling a webhook repeatedly if t
ak. This has been patched in versions 5.29.0, 6.21.2, and 7.5.0. As a workaound, avoid calling a webhook repeatedly if the webhook fails. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nodejs/undici/security/advisories/GHSA-cxrh-j4jr-qwg3 - https://github.com/nodejs/undici/issues/3895 - https://github.com/nodejs/undici/pull/4088
CVE ID: CVE-2025-47280 State: PUBLISHED Published: 2025-05-13T17:06:56.715Z Last Updated: 2025-05-13T17:36:37.775Z Vendors: umbraco Products: Umbraco.Forms.Issues Problem Types: CWE-116 Description: Umbraco Forms is a form builder that integrates with the Umbraco content management system. Starting in the 7.x branch and prior to versions 13.4.2 and 15.1.2, the 'Send email' workflow does not HTML encode the user-provided field values in the sent email message, making any form with this workflow configured vulnerable, as it allows sending the message from a trusted system and address, potentially bypassing spam and email client security systems. This issue affects all (supported) versions Umbr
address, potentially bypassing spam and email client security systems. This issue affects all (supported) versions Umbraco Forms and is patched in 13.4.2 and 15.1.2. Unpatched or unsupported versions can workaround this issue by using the `Send email with template (Razor)` workflow instead or writing a custom workflow type. To avoid accidentally using the vulnerable workflow again, the `SendEmail` workflow type can be removed using a composer available in the GitHub Security Advisory for this vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/umbraco/Umbraco.Forms.Issues/security/advisories/GHSA-2qrj-g9hq-chph
CVE ID: CVE-2025-47281 State: PUBLISHED Published: 2025-07-23T20:35:21.199Z Last Updated: 2025-07-23T20:49:31.882Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H) Vendors: kyverno Products: kyverno Problem Types: CWE-20, CWE-248 Description: Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service (DoS) vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft expressions using the {{@}} variable combined with a pipe and an invalid JMESPath function (e.g., {{@ | non_existent_function }}). This leads
{{@}} variable combined with a pipe and an invalid JMESPath function (e.g., {{@ | non_existent_function }}). This leads to a nil value being substituted into the policy structure. Subsequent processing by internal functions, specifically getValueAsStringMap, which expect string values, results in a panic due to a type assertion failure (interface {} is nil, not string). This crashes Kyverno worker threads in the admission controller and causes continuous crashes of the reports controller pod. This is fixed in version 1.14.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq - https://github.com/kyverno/
: References: - https://github.com/kyverno/kyverno/security/advisories/GHSA-r5p3-955p-5ggq - https://github.com/kyverno/kyverno/commit/cbd7d4ca24de1c55396fc3295e9fc3215832be7c
CVE ID: CVE-2025-47282 State: PUBLISHED Published: 2025-05-19T17:53:28.412Z Last Updated: 2025-05-20T13:10:56.740Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: gardener Products: external-dns-management Problem Types: CWE-20 Description: Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener's External DNS Management prior to version 0.23.6 that could allow a user with administrative privileges for a Gardener project or a user with administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot c
administrative privileges for a shoot cluster, including administrative privileges for a single namespace of the shoot cluster, to obtain control over the seed cluster where the shoot cluster is managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. The affected component is `gardener/external-dns-management`. The `external-dns-management` component may also be deployed on the seeds by the `gardener/gardener-extension-shoot-dns-service` extension when the extension is enabled. In this case, all versions of the `shoot-dns-service` extension `<= v1.60.0` are affected by this vulnerability. Version 0.23.6 of Gard
ll versions of the `shoot-dns-service` extension `<= v1.60.0` are affected by this vulnerability. Version 0.23.6 of Gardener External DNS Management fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gardener/external-dns-management/security/advisories/GHSA-xwgg-m7fx-83wx
CVE ID: CVE-2025-47283 State: PUBLISHED Published: 2025-05-19T18:46:11.863Z Last Updated: 2025-05-20T13:10:08.239Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: gardener Products: gardener Problem Types: CWE-20 Description: Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public clou
ster(s) where their shoot clusters are managed. This CVE affects all Gardener installations no matter of the public cloud provider(s) used for the seed clusters/shoot clusters. `gardener/gardener` (`gardenlet`) is the affected component. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gardener/gardener/security/advisories/GHSA-3hw7-qj9h-r835
CVE ID: CVE-2025-47284 State: PUBLISHED Published: 2025-05-19T18:52:57.520Z Last Updated: 2025-05-20T13:03:34.493Z Severity: CRITICAL (CVSS 9.9 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: gardener Products: gardener Problem Types: CWE-150 Description: Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations
ain control over the seed cluster(s) where their shoot clusters are managed. This CVE affects all Gardener installations where gardener/gardener-extension-provider-gcp is in use. Versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 fix the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/gardener/gardener/security/advisories/GHSA-9x73-87fh-54w9
CVE ID: CVE-2025-47285 State: PUBLISHED Published: 2025-05-15T17:24:03.442Z Last Updated: 2025-05-15T18:37:33.747Z Vendors: vyperlang Products: vyper Problem Types: CWE-691 Description: Vyper is the Pythonic Programming Language for the Ethereum Virtual Machine. In versions up to and including 0.4.2rc1, `concat()` may skip evaluation of side effects when the length of an argument is zero. This is due to a fastpath in the implementation which skips evaluation of argument expressions when their length is zero. In practice, it would be very unusual in user code to construct zero-length bytestrings using an expression with side-effects, since zero-length bytestrings are typically constructed wit
ro-length bytestrings using an expression with side-effects, since zero-length bytestrings are typically constructed with the empty literal `b""`; the only way to construct an empty bytestring which has side effects would be with the ternary operator introduced in v0.3.8, e.g. `b"" if self.do_some_side_effect() else b""`. The fix is available in pull request 4644 and expected to be part of the 0.4.2 release. As a workaround, don't have side effects in expressions which construct zero-length bytestrings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vyperlang/vyper/security/advisories/GHSA-qhr6-mgqr-mchm - https://github.com/vyperlang/vyper/pull/4644 - ht
//github.com/vyperlang/vyper/security/advisories/GHSA-qhr6-mgqr-mchm - https://github.com/vyperlang/vyper/pull/4644 - https://github.com/vyperlang/vyper/blob/68b68c4b30c5ef2f312b4674676170b8a6eaa316/vyper/builtins/functions.py#L560-L562
CVE ID: CVE-2025-47286 State: PUBLISHED Published: 2025-11-10T18:38:40.283Z Last Updated: 2025-11-10T19:47:01.682Z Vendors: Combodo Products: iTop Problem Types: CWE-74 Description: Combodo iTop is a web based IT service management tool. In versions prior to 2.7.13 and 3.2.2, an administrator can, by editing the configuration of the iTop instance, execute code on the server. Versions 2.7.13 and 3.2.2 escape and check the config parameter before executing a command based on it. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Combodo/iTop/security/advisories/GHSA-4w93-rw6g-5m9c
CVE ID: CVE-2025-47287 State: PUBLISHED Published: 2025-05-15T21:17:55.188Z Last Updated: 2025-05-29T06:04:05.899Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: tornadoweb Products: tornado Problem Types: CWE-770 Description: Tornado is a Python web framework and asynchronous networking library. When Tornado's ``multipart/form-data`` parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This DoS is compounded by the fact that the logging subsystem is synchronous. All versions of Tornado prior to 6.5.0 ar
This DoS is compounded by the fact that the logging subsystem is synchronous. All versions of Tornado prior to 6.5.0 are affected. The vulnerable parser is enabled by default. Upgrade to Tornado version 6.50 to receive a patch. As a workaround, risk can be mitigated by blocking `Content-Type: multipart/form-data` in a proxy. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/tornadoweb/tornado/security/advisories/GHSA-7cx3-6m66-7c5m - https://github.com/tornadoweb/tornado/commit/b39b892bf78fe8fea01dd45199aa88307e7162f3
CVE ID: CVE-2025-47288 State: PUBLISHED Published: 2025-05-29T19:25:49.798Z Last Updated: 2025-05-30T12:35:34.217Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: discourse Products: discourse-policy Problem Types: CWE-200 Description: Discourse Policy plugin gives the ability to confirm users have seen or done something. Prior to version 0.1.1, if there was a policy posted to a public topic that was tied to a private group then the group members could be shown to non-group members. This issue has been patched in version 0.1.1. A workaround involves moving any policy topics with private groups to restricted categories. Additional Analyst Notes: - CISA ADP Vulnr
volves moving any policy topics with private groups to restricted categories. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/discourse/discourse-policy/security/advisories/GHSA-jc5r-rm2j-mh4x - https://github.com/discourse/discourse-policy/commit/6b4390fe486408cc86ccea6b091406cfac6c5b8f
CVE ID: CVE-2025-47289 State: PUBLISHED Published: 2025-06-02T11:00:20.730Z Last Updated: 2025-06-02T13:05:57.212Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N) Vendors: CE-PhoenixCart Products: PhoenixCart Problem Types: CWE-1004 Description: CE Phoenix is a free, open-source eCommerce platform. A stored cross-site scripting (XSS) vulnerability was discovered in CE Phoenix versions 1.0.9.9 through 1.1.0.2 where an attacker can inject malicious JavaScript into the testimonial description field. Once submitted, if the shop owner (admin) approves the testimonial, the script executes in the context of any user visiting the testimonial page. Because the session cookies
e testimonial, the script executes in the context of any user visiting the testimonial page. Because the session cookies are not marked with the `HttpOnly` flag, they can be exfiltrated by the attacker — potentially leading to account takeover. Version 1.1.0.3 fixes the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/CE-PhoenixCart/PhoenixCart/security/advisories/GHSA-98qq-m8qj-vvgj - https://drive.google.com/file/d/1uQAEjewSL9jWWu1UHe47tAnM7U4_x39g/view?usp=drive_link
CVE ID: CVE-2025-47290 State: PUBLISHED Published: 2025-05-20T18:25:51.703Z Last Updated: 2025-05-20T18:44:19.248Z Vendors: containerd Products: containerd Problem Types: CWE-367 Description: containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used
.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/containerd/containerd/security/advisories/GHSA-cm76-qm8v-3j95 - https://github.com/containerd/containerd/commit/cada13298fba85493badb6fecb6ccf80e49673cc - https://github.com/containerd/containerd/releases/tag/v2.1.1
CVE ID: CVE-2025-47291 State: PUBLISHED Published: 2025-05-21T17:26:31.141Z Last Updated: 2025-05-21T19:19:39.944Z Vendors: containerd Products: containerd Problem Types: CWE-266 Description: containerd is an open-source container runtime. A bug was found in the containerd's CRI implementation where containerd, starting in version 2.0.1 and prior to version 2.0.5, doesn't put usernamespaced containers under the Kubernetes' cgroup hierarchy, therefore some Kubernetes limits are not honored. This may cause a denial of service of the Kubernetes node. This bug has been fixed in containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. As a workaround, disable user
containerd 2.0.5+ and 2.1.0+. Users should update to these versions to resolve the issue. As a workaround, disable usernamespaced pods in Kubernetes temporarily. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/containerd/containerd/security/advisories/GHSA-cxfp-7pvr-95ff
CVE ID: CVE-2025-47292 State: PUBLISHED Published: 2025-05-14T10:44:28.478Z Last Updated: 2025-05-14T13:34:56.456Z Vendors: cap-collectif Products: cap-collectif Problem Types: CWE-502 Description: Cap Collectif is an online decision making platform that integrates several tools. Before commit 812f2a7d271b76deab1175bdaf2be0b8102dd198, the `DebateAlternateArgumentsResolver` deserializes a `Cursor`, allowing any classes and which can be controlled by unauthenticated user. Exploitation of this vulnerability can lead to Remote Code Execution. The vulnerability is fixed in commit 812f2a7d271b76deab1175bdaf2be0b8102dd198. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git
t 812f2a7d271b76deab1175bdaf2be0b8102dd198. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/cap-collectif/cap-collectif/security/advisories/GHSA-hf7r-rjh4-5fc8 - https://github.com/cap-collectif/cap-collectif/commit/812f2a7d271b76deab1175bdaf2be0b8102dd198
CVE ID: CVE-2025-47293 State: PUBLISHED Published: 2025-06-19T21:35:40.992Z Last Updated: 2025-06-20T15:58:24.070Z Vendors: powsybl Products: powsybl-core Problem Types: CWE-611, CWE-918 Description: PowSyBl (Power System Blocks) is a framework to build power system oriented software. Prior to version 6.7.2, in certain places, powsybl-core XML parsing is vulnerable to an XML external entity (XXE) attack and to a server-side request forgery (SSRF) attack. This allows an attacker to elevate their privileges to read files that they do not have permissions to, including sensitive files on the system. The vulnerable class is com.powsybl.commons.xml.XmlReader which is considered to be untrusted in
ve files on the system. The vulnerable class is com.powsybl.commons.xml.XmlReader which is considered to be untrusted in use cases where untrusted users can submit their XML to the vulnerable methods. This can be a multi-tenant application that hosts many different users perhaps with different privilege levels. This issue has been patched in com.powsybl:powsybl-commons: 6.7.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/powsybl/powsybl-core/security/advisories/GHSA-qpj9-qcwx-8jv2 - https://github.com/powsybl/powsybl-core/commit/e6c7c4997ae8758b54a2f23ce1a499e25113acdc - https://github.com/powsybl/powsybl-core/releases/tag/v6.7.2
CVE ID: CVE-2025-47294 State: PUBLISHED Published: 2025-05-28T07:55:39.827Z Last Updated: 2025-05-28T14:19:04.332Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-190 Description: A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-388
CVE ID: CVE-2025-47295 State: PUBLISHED Published: 2025-05-28T07:54:05.794Z Last Updated: 2025-05-28T14:23:42.935Z Severity: LOW (CVSS 3.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: Fortinet Products: FortiOS Problem Types: CWE-126 Description: A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://fortiguard.fortinet.com/psirt/FG-IR-24-381