Vulnerability Database

322,905

Total vulnerabilities in the database

CVE-2025-64157

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or commands via specifically crafted configuration.

  • Published: Feb 10, 2026
  • Updated: Feb 11, 2026
  • CVE: CVE-2025-64157
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
fortinet / fortios 7.0.0 7.4.10
fortinet / fortios 7.6.0 7.6.5