CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability. Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.
- CISA KEV-listed (remediation due 2026-09-12)
- EPSS 3.8% (90.0% percentile)
- CVSS 8.1 high