Vulnerability Database

319,590

Total vulnerabilities in the database

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

  • Published: Jan 13, 2026
  • Updated: Jan 17, 2026
  • CVE: CVE-2025-25249
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 8.1
  • AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortios 6.4.0 6.4.17
fortinet / fortios 7.0.0 7.0.18
fortinet / fortios 7.2.0 7.2.12
fortinet / fortios 7.4.0 7.4.9
fortinet / fortios 7.6.0 7.6.4
fortinet / fortiswitchmanager 7.0.0 7.0.6
fortinet / fortiswitchmanager 7.2.0 7.2.7
fortinet / fortisase 25.1.39 25.1.39.x
fortinet / fortisase 25.1.51 25.1.51.x