CVE-2025-25249

No fix known ExploitedEPSS 4%CVSS 7.4

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Published 2026-01-13 · In CISA KEV since 2026-09-09 · CVE record · OSV

Products: Fortinet FortiSwitchManager, Fortinet FortiOS, Siemens RUGGEDCOM APE1808