[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-25249":6},{"stargazers_count":4,"fetched_at":5},7,"2026-09-10T04:22:39.150Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":30,"aliases":31,"duplicate_of":9,"upstream":32,"downstream":33,"duplicates":34,"related":35,"reserved_at":9,"published_at":36,"modified_at":37,"state":38,"summary":39,"references_raw":50,"kevs":71,"epss":82,"epss_history":84,"metrics":357,"affected":368},"CVE-2025-25249","A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets",null,[11,24],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","weakness","Draft","Variant","High",[20],{"id":21,"name":22,"techniques":23},"CAPEC-92","Forced Integer Overflow",[],{"_key":25,"id":25,"name":26,"description":27,"type":15,"status":16,"abstraction":28,"likelihood_of_exploit":18,"capec":29},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",[],[],[],[],[],[],[],"2026-01-13T16:32:35.662Z","2026-09-10T03:55:15.185Z","Modified",{"cisa_kev":40,"cisa_ransomware":41,"cisa_vendor":42,"epss_severity":43,"epss_score":44,"severity":45,"severity_score":46,"severity_version":47,"severity_source":48,"severity_vector":49,"severity_status":38},true,false,"Fortinet","low",0.00759,"critical",9.8,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",[51,57,61,66],{"url":52,"sources":53,"tags":55},"https://fortiguard.fortinet.com/psirt/FG-IR-25-084",[54,48],"cve.org",[56],"Vendor Advisory",{"url":58,"sources":59,"tags":60},"https://cert-portal.siemens.com/productcert/html/ssa-864900.html",[54,48],[],{"url":62,"sources":63,"tags":64},"https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/",[54,48],[65],"Third Party Advisory",{"url":67,"sources":68,"tags":69},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249",[54,48],[70],"Government Resource",[72],{"source":73,"vendor":42,"product":74,"date_added":75,"vulnerability_name":76,"short_description":77,"required_action":78,"due_date":79,"known_ransomware_campaign_use":80,"notes":81,"exploitation_type":9},"cisa","Multiple Products","2026-09-09","Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-09-12","Unknown","https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249",{"date":75,"score":44,"percentile":83},0.53107,[85,89,93,96,99,102,106,109,112,115,118,121,124,127,130,133,136,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,184,187,190,193,197,200,203,206,208,211,214,217,220,223,226,229,232,235,238,241,244,247,250,253,256,259,262,265,268,271,274,277,280,283,286,289,293,296,299,302,305,308,311,314,317,320,323,326,329,332,335,337,340,343,346,349,351,354],{"date":86,"score":87,"percentile":88},"2026-01-14",0.00024,0.05884,{"date":90,"score":91,"percentile":92},"2026-01-15",0.00021,0.04899,{"date":94,"score":91,"percentile":95},"2026-01-16",0.04878,{"date":97,"score":91,"percentile":98},"2026-01-17",0.04881,{"date":100,"score":91,"percentile":101},"2026-01-18",0.04867,{"date":103,"score":104,"percentile":105},"2026-01-19",0.00028,0.07367,{"date":107,"score":104,"percentile":108},"2026-01-20",0.07331,{"date":110,"score":104,"percentile":111},"2026-01-21",0.07326,{"date":113,"score":104,"percentile":114},"2026-01-22",0.07301,{"date":116,"score":104,"percentile":117},"2026-01-23",0.07364,{"date":119,"score":104,"percentile":120},"2026-01-24",0.07416,{"date":122,"score":104,"percentile":123},"2026-01-25",0.07397,{"date":125,"score":104,"percentile":126},"2026-01-26",0.07376,{"date":128,"score":104,"percentile":129},"2026-01-27",0.07363,{"date":131,"score":104,"percentile":132},"2026-01-28",0.07341,{"date":134,"score":104,"percentile":135},"2026-01-29",0.07329,{"date":137,"score":104,"percentile":132},"2026-01-30",{"date":139,"score":104,"percentile":140},"2026-01-31",0.07361,{"date":142,"score":104,"percentile":143},"2026-02-01",0.07392,{"date":145,"score":104,"percentile":146},"2026-02-02",0.07377,{"date":148,"score":104,"percentile":149},"2026-02-03",0.0734,{"date":151,"score":104,"percentile":152},"2026-02-04",0.07357,{"date":154,"score":104,"percentile":155},"2026-02-05",0.07407,{"date":157,"score":104,"percentile":158},"2026-02-06",0.07438,{"date":160,"score":104,"percentile":161},"2026-02-07",0.07454,{"date":163,"score":104,"percentile":164},"2026-02-08",0.07449,{"date":166,"score":104,"percentile":167},"2026-02-09",0.07404,{"date":169,"score":104,"percentile":170},"2026-02-10",0.07386,{"date":172,"score":104,"percentile":173},"2026-02-11",0.07421,{"date":175,"score":104,"percentile":176},"2026-02-12",0.07457,{"date":178,"score":104,"percentile":179},"2026-02-13",0.07381,{"date":181,"score":182,"percentile":183},"2026-02-14",0.00031,0.08343,{"date":185,"score":182,"percentile":186},"2026-02-15",0.08357,{"date":188,"score":182,"percentile":189},"2026-02-16",0.08342,{"date":191,"score":182,"percentile":192},"2026-02-17",0.08308,{"date":194,"score":195,"percentile":196},"2026-02-18",0.00013,0.02071,{"date":198,"score":195,"percentile":199},"2026-02-19",0.02087,{"date":201,"score":195,"percentile":202},"2026-02-20",0.02097,{"date":204,"score":195,"percentile":205},"2026-02-21",0.02096,{"date":207,"score":195,"percentile":202},"2026-02-22",{"date":209,"score":195,"percentile":210},"2026-02-23",0.02043,{"date":212,"score":195,"percentile":213},"2026-02-24",0.02021,{"date":215,"score":195,"percentile":216},"2026-02-25",0.02008,{"date":218,"score":195,"percentile":219},"2026-02-26",0.01979,{"date":221,"score":195,"percentile":222},"2026-02-27",0.02022,{"date":224,"score":195,"percentile":225},"2026-02-28",0.02025,{"date":227,"score":195,"percentile":228},"2026-03-01",0.02036,{"date":230,"score":195,"percentile":231},"2026-03-02",0.02051,{"date":233,"score":195,"percentile":234},"2026-03-03",0.02062,{"date":236,"score":195,"percentile":237},"2026-03-04",0.02046,{"date":239,"score":195,"percentile":240},"2026-03-05",0.02083,{"date":242,"score":195,"percentile":243},"2026-03-06",0.02079,{"date":245,"score":195,"percentile":246},"2026-03-07",0.02078,{"date":248,"score":195,"percentile":249},"2026-03-08",0.02075,{"date":251,"score":195,"percentile":252},"2026-03-09",0.02059,{"date":254,"score":195,"percentile":255},"2026-03-10",0.02057,{"date":257,"score":195,"percentile":258},"2026-03-11",0.02028,{"date":260,"score":195,"percentile":261},"2026-03-12",0.0204,{"date":263,"score":195,"percentile":264},"2026-03-13",0.02037,{"date":266,"score":195,"percentile":267},"2026-03-14",0.02009,{"date":269,"score":195,"percentile":270},"2026-03-15",0.01989,{"date":272,"score":195,"percentile":273},"2026-03-16",0.01978,{"date":275,"score":195,"percentile":276},"2026-03-17",0.01953,{"date":278,"score":195,"percentile":279},"2026-03-18",0.01951,{"date":281,"score":195,"percentile":282},"2026-03-19",0.01944,{"date":284,"score":195,"percentile":285},"2026-03-20",0.01947,{"date":287,"score":195,"percentile":288},"2026-03-21",0.02106,{"date":290,"score":291,"percentile":292},"2026-03-22",0.00014,0.02355,{"date":294,"score":291,"percentile":295},"2026-03-23",0.02354,{"date":297,"score":291,"percentile":298},"2026-03-24",0.02344,{"date":300,"score":291,"percentile":301},"2026-03-25",0.02337,{"date":303,"score":291,"percentile":304},"2026-03-26",0.0235,{"date":306,"score":291,"percentile":307},"2026-03-27",0.02361,{"date":309,"score":291,"percentile":310},"2026-03-28",0.02359,{"date":312,"score":291,"percentile":313},"2026-03-29",0.02353,{"date":315,"score":291,"percentile":316},"2026-03-30",0.02346,{"date":318,"score":291,"percentile":319},"2026-03-31",0.02334,{"date":321,"score":291,"percentile":322},"2026-04-01",0.02336,{"date":324,"score":291,"percentile":325},"2026-04-02",0.02405,{"date":327,"score":291,"percentile":328},"2026-04-03",0.02414,{"date":330,"score":291,"percentile":331},"2026-04-04",0.02415,{"date":333,"score":291,"percentile":334},"2026-04-05",0.02411,{"date":336,"score":291,"percentile":334},"2026-04-06",{"date":338,"score":291,"percentile":339},"2026-04-07",0.02413,{"date":341,"score":291,"percentile":342},"2026-04-08",0.02418,{"date":344,"score":291,"percentile":345},"2026-04-09",0.02438,{"date":347,"score":291,"percentile":348},"2026-04-10",0.0243,{"date":350,"score":291,"percentile":342},"2026-04-11",{"date":352,"score":291,"percentile":353},"2026-04-12",0.02409,{"date":355,"score":291,"percentile":356},"2026-04-13",0.02408,[358,364],{"source":54,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":359,"cvss_v4_0":9},{"baseScore":360,"baseSeverity":361,"vectorString":362,"impactScore":46,"exploitabilityScore":363},7.4,"HIGH","CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C",5.6,{"source":48,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":365,"cvss_v4_0":9},{"baseScore":46,"baseSeverity":366,"vectorString":49,"impactScore":46,"exploitabilityScore":367},"CRITICAL",10,[369,407,415],{"ecosystem":9,"name":370,"vendor":371,"product":370,"cpe_part":372,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":373},"fortios","fortinet","o",[374,379,383,387,393,397,401,404],{"version":375,"is_range":40,"range_type":54,"version_start":376,"version_start_type":377,"version_end":378,"version_end_type":377,"fixed_in":9},">= 7.6.0, \u003C= 7.6.2","7.6.0","including","7.6.2",{"version":380,"is_range":40,"range_type":54,"version_start":381,"version_start_type":377,"version_end":382,"version_end_type":377,"fixed_in":9},">= 7.4.0, \u003C= 7.4.7","7.4.0","7.4.7",{"version":384,"is_range":40,"range_type":54,"version_start":385,"version_start_type":377,"version_end":386,"version_end_type":377,"fixed_in":9},">= 7.2.4, \u003C= 7.2.11","7.2.4","7.2.11",{"version":388,"is_range":40,"range_type":389,"version_start":390,"version_start_type":377,"version_end":391,"version_end_type":392,"fixed_in":9},"gte6.4.0_lt6.4.17","cpe","6.4.0","6.4.17","excluding",{"version":394,"is_range":40,"range_type":389,"version_start":395,"version_start_type":377,"version_end":396,"version_end_type":392,"fixed_in":9},"gte7.0.0_lt7.0.18","7.0.0","7.0.18",{"version":398,"is_range":40,"range_type":389,"version_start":399,"version_start_type":377,"version_end":400,"version_end_type":392,"fixed_in":9},"gte7.2.0_lt7.2.12","7.2.0","7.2.12",{"version":402,"is_range":40,"range_type":389,"version_start":381,"version_start_type":377,"version_end":403,"version_end_type":392,"fixed_in":9},"gte7.4.0_lt7.4.9","7.4.9",{"version":405,"is_range":40,"range_type":389,"version_start":376,"version_start_type":377,"version_end":406,"version_end_type":392,"fixed_in":9},"gte7.6.0_lt7.6.4","7.6.4",{"ecosystem":9,"name":408,"vendor":371,"product":408,"cpe_part":409,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":410},"fortisase","a",[411,413],{"version":412,"is_range":41,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"25.1.39",{"version":414,"is_range":41,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"25.1.51",{"ecosystem":9,"name":416,"vendor":371,"product":416,"cpe_part":409,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":417},"fortiswitchmanager",[418,422,425],{"version":419,"is_range":40,"range_type":54,"version_start":420,"version_start_type":377,"version_end":421,"version_end_type":377,"fixed_in":9},">= 7.2.2, \u003C= 7.2.5","7.2.2","7.2.5",{"version":423,"is_range":40,"range_type":389,"version_start":395,"version_start_type":377,"version_end":424,"version_end_type":392,"fixed_in":9},"gte7.0.0_lt7.0.6","7.0.6",{"version":426,"is_range":40,"range_type":389,"version_start":399,"version_start_type":377,"version_end":427,"version_end_type":392,"fixed_in":9},"gte7.2.0_lt7.2.7","7.2.7"]