← Database

CVE-2025-25249

HIGH CVSS: 8.1 Published: 2026-01-13 Modified: 2026-06-17

Description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Affected Platforms

Fortinet FortiswitchmanagerFortinet FortiosFortinet Fortisase

Weakness Type

CWE-122, CWE-787

References