CVE-2025-31104

Highest-risk unexploited with PoCs

Exploit code exists, no confirmed in-the-wild activity, ranked by EPSS

Actively Exploited

Confirmed exploited in the wild, sorted by most recently updated

CVSS 7EPSS 1%

Published 2025-06-10Updated 2025-06-10

Vulnerability details

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 through 7.6.1, FortiADC 7.4.0 through 7.4.6, FortiADC 7.2.0 through 7.2.7, FortiADC 7.1.0 through 7.1.4, FortiADC 7.0 all versions, FortiADC 6.2 all versions, FortiADC 6.1 all versions, FortiADC 6.0 all versions, FortiADC 5.4 all versions, FortiADC 5.3 all versions, FortiADC 5.2 all versions, FortiADC 5.1 all versions, FortiADC 5.0 all versions, FortiADC 4.8 all versions, FortiADC 4.7 all versions, FortiADC 4.6 all versions, FortiADC 4.5 all versions, FortiADC 4.4 all versions, FortiADC 4.3 all versions, FortiADC 4.2 all versions, FortiADC 4.1 all versions, FortiADC 4.0 all versions, FortiADC 3.2 all versions, FortiADC 3.1 all versions, FortiADC 3.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

CNAfortinet

EPSS score history

Sources

3 links

PoC links are not available for guest users. Login to view them.

SC Magazine NVD Analysis CVE Organization

Profile

CVSS

EPSS

Published

2025-06-10

Updated

2025-06-10

CNA

fortinet

Vendors

Fortinet

1 product

CPEs

123

cpe:2.3:h:fortinet:fortiadc:7.6.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.6.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.4.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.7:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.1.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.1.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.1.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.1.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.1.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:7.0.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.1.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.0.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.0.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.0.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.0.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:6.0.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.4.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.7:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.8:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.7:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.2.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.7:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.1.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.0.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.0.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.0.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.0.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:5.0.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.8:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.7:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.6:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.5:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.8.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.7.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.7.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.7.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.7.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.6.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.6.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.6.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.5.4:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.5.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.5.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.5.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.5.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.4.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.4.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.3.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.3.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.3.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.2.3:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.2.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.2.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.2.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.1.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.1.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.0.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.0.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:4.0.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:3.2.2:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:3.2.1:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:3.2.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:3.1.0:*:*:*:*:*:*:*

cpe:2.3:h:fortinet:fortiadc:3.0.0:*:*:*:*:*:*:*

Vulnerability dashboard

Highest-risk unexploited with PoCs

Actively Exploited

Recently Updated