Firetruck

CVE-2025-25249

KEV
Updated Oct 15, 2026 · PUBLISHED
View KEV entry →

Description

Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FortiOSFortinet / FortiOS>= 7.2.4, <= 7.2.11affected
FortiOSFortinet / FortiOS>= 7.4.0, <= 7.4.7affected
FortiOSFortinet / FortiOS>= 7.6.0, <= 7.6.2affected
FortiSwitchManagerFortinet / FortiSwitchManager>= 7.2.2, <= 7.2.5affected
RUGGEDCOM APE1808Siemens / RUGGEDCOM APE1808>= 0, < *affected