Vulnerability Database

308,485

Total vulnerabilities in the database

CVE-2025-31104

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiADC 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2.0 through 7.2.7, 7.1.0 through 7.1.4, 7.0 all versions, 6.2 all versions, 6.1 all versions may allow an authenticated attacker to execute unauthorized code via crafted HTTP requests.

  • Published: Jun 10, 2025
  • Updated: Nov 16, 2025
  • CVE: CVE-2025-31104
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.2
  • AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

OWASP TOP 10:

Software From Fixed in
fortinet / fortiadc 6.1.0 7.1.5
fortinet / fortiadc 7.2.0 7.2.8
fortinet / fortiadc 7.4.0 7.4.7
fortinet / fortiadc 7.6.0 7.6.2