CVE-2025-25249

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7.4EPSS 4%

Published 2026-01-13Updated 2026-09-08

Exploited in the wildMedia 5808

Vulnerability details

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C

CNAfortinet

EPSS score history

Sources

8 links

PoC links are not available for guest users. Login to view them.

CVEShield CVE Organization NVD Analysis VulnCheck KEV CISA Known Exploited EUVD The Hacker News SC Magazine

Profile

CVSS

7.4

EPSS

Published

2026-01-13

Updated

2026-09-08

CNA

fortinet

Vendors

Fortinet

3 products

CPEs

cpe:2.3:a:fortinet:fortiswitchmanager:7.2.5:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiswitchmanager:7.2.4:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiswitchmanager:7.2.3:*:*:*:*:*:*:*

cpe:2.3:a:fortinet:fortiswitchmanager:7.2.2:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.6.2:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:*

cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated