CVE-2025-53844
Modified
Modified - Updated After Analysis
BaseFortify
Publication date: 2026-05-12
Last updated on: 2026-06-09
Assigner: Fortinet, Inc.
Description
Description
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fortinet | fortios | From 7.2.0 (inc) to 7.2.12 (exc) |
| fortinet | fortios | From 7.4.0 (inc) to 7.4.9 (exc) |
| fortinet | fortios | From 7.6.0 (inc) to 7.6.4 (exc) |
Helpful Resources
Exploitability
CWE
KEV
| CWE ID | Description |
|---|---|
| CWE-787 | The product writes data past the end, or before the beginning, of the intended buffer. |