Other security products
CVE-2025-46752: Insertion of sensitive information into log file in FortiDLP
A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.
Published
ExploitedNot in CISA KEV
Ransomware useNot reportedPer CISA
SeverityMEDIUMCVSS 3.1 4.2
EPSS0.16%Chance of exploitation in 30 days
Public exploitNot tracked
FixNot yet
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| FortiDLP 12.0.4 to 12.0.5 | Upgrade past 12.0.5; see the advisory |
| FortiDLP 12.0 | See the advisory |
| FortiDLP 12.0 | See the advisory |
| FortiDLP 11.5 | See the advisory |
| FortiDLP 11.4.5 to 11.4.6 | Upgrade past 11.4.6; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to information disclosure via re-using the enrollment code.
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 10 Oct 2026.