IM
IronMonkey Threat Research

CVE-2025-53844 HIGH

Published: 2026-05-12 | Last Modified: 2026-10-07 | Status: Modified

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

Additional Descriptions (1)

Una vulnerabilidad de escritura fuera de límites en Fortinet FortiOS 7.6.0 hasta 7.6.3, FortiOS 7.4.0 hasta 7.4.8, FortiOS 7.2.0 hasta 7.2.11 permite al atacante ejecutar código o comandos no autorizados a través de paquetes especialmente diseñados.

CVSS Metrics

Base Score: 8.8 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
ScopeUNCHANGED
Confidentiality ImpactHIGH
Integrity ImpactHIGH
Availability ImpactHIGH

Source: [email protected]

Type: Secondary

Exploitability Score: 2.8

Impact Score: 5.9

Weaknesses

Source Type Description
[email protected] Secondary
en CWE-787

Affected Products

Vendor Product Version Update Type
fortinet fortios * <built-in method update of dict object at 0x7fd2d829d8c0> Operating System
fortinet fortios * <built-in method update of dict object at 0x7fd36acdf040> Operating System
fortinet fortios * <built-in method update of dict object at 0x7fd34231a880> Operating System

Affected Configurations

Operator: OR

Vulnerable CPE
Yes cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Yes cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

References