CVE-2025-25249

HIGH

Fortinet FortiOS <7.6.3 - Buffer Overflow

Title source: llm

Description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

References (1)

[Vendor Advisory] https://fortiguard.fortinet.com/psirt/FG-IR-25-084

Scores

CVSS v3 8.1

EPSS 0.0001

EPSS Percentile 2.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Classification

CWE

CWE-122 CWE-787

Status published

Affected Products (4)

fortinet/fortios < 6.4.17

fortinet/fortiswitchmanager < 7.0.6

fortinet/fortisase

Timeline

Published Jan 13, 2026

Tracked Since Feb 18, 2026