CVE-2025-25249 Fortinet FortiSwitchManager
A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager…
- CVSS
- 7.4 High
- EPSS
- 3.7%
- Percentile
- 90
- Published
- 2026-01-13
- Force
- 9 of 12
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C
On CISA’s exploited list
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Added
- 2026-09-09
- Federal patch deadline
- 2026-09-12
- Ransomware use
- not known