CVE-2025-25249
KEV High · CVSS 8.1- CVSS
- 8.1
- nvd
- EPSS
- —
- KEV
- Listed
- 2026-09-09
- Class
- kernel local
- CWE-122, CWE-787
Description
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets
References
Status: profiled · ingested 2026-09-10T06:00:00.000Z