CVE record · 3 sources
CVE-2025-25249
KEVFortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Vendor
- Fortinet
- Product
- Multiple Products
- EPSS
- 1.00 (p100)
- CISA KEV
- listed
- Exposure class
- Edge / VPN / firewall, Browser
Coverage
3Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.
-
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-25249 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability…
-
September 2026 CVE Landscape
In September 2026, Insikt Group® identified 94 high-impact vulnerabilities that should be prioritized for remediation, 59 of which had a Very Critical Recorded Future Risk Score. This represents a 29% increase from last month.