CVE-2025-64157: fortinet fortios

Modified

Published 10-02-2026Last modified 12-05-2026

Vulnerability summary

CVE-2025-64157 is a high (CVSS 7.2) vulnerability in fortinet fortios. EPSS estimates a 1.52% chance of exploitation in the next 30 days, higher than 74.3% of scored vulnerabilities.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v3.1 (NVD)

EPSS score

1.52%

0%100%

Low · +0.10 pp in 30 days

KEVNot listedNot listed by any tracked catalog.

RansomwareNot flaggedNo ransomware use recorded.

Public exploits0No public exploits recorded

Timeline

10-02-2026
PublishedVulnerability first disclosed.
12-05-2026
Last modifiedVulnerability information updated.

Description

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or commands via specifically crafted configuration.

CVSS metrics

2 scores · 2 sources · 1 version

v3.17.2

EPSS trend

Probability

1.52%

Chance of exploitation in the next 30 days

Percentile

74%

Versus all other CVEs

30-day change

Increase +0.10 pp

From 1.42% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs

CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-134Use of Externally-Controlled Format StringThe product uses a function that accepts a format string as an argument, but the format string originates from an external source.

Affected systems

Fortinet1 product

fortios≥ 7.6.0, ≤ 7.6.4 | ≥ 7.4.0, ≤ 7.4.9 | ≥ 7.2.0, ≤ 7.2.11 | ≥ 7.0.0, ≤ 7.0.19 | ≥ 7.0.0, < 7.4.10 | ≥ 7.6.0, < 7.6.5

1 vendor · 1 product

References

2 links