CVE-2025-34347

Runtime vulnerability - Fortinet

High CVSS Score: 8.5 Published: 2025-10-05

Description

A sql injection vulnerability in Fortinet Runtime allows attackers to cause denial of service. This affects versions through 16.83.4.

Affected Systems

Vendor Fortinet
Product Runtime
Affected Versions < 12.8
CWE ID CWE-200

Mitigation

As a workaround, use Web Application Firewall until a patch is available.

Fix Instructions

1. Update Runtime to the latest version
2. Apply vendor patch when available
3. Implement network segmentation
4. Monitor for exploitation attempts

References

Risk Assessment

CVSS: 8.5/10

Exploit Available Unknown
Patch Available Yes

Need Help Patching?

Our security team can help assess and remediate this vulnerability in your environment.

Get Help

Stay Ahead of Threats

Subscribe to our vulnerability feed and get instant alerts when new CVEs affect your systems.

Start Monitoring