Fortinet on PhllapsNET

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Wed, 09 Sep 2026 00:00:00 +0000

🚨SEVERITY: HIGH — CVSS 8.1Security Advisory

TL;DR 📌

Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.
Highest CVSS: 8.1 (High).
Listed in CISA KEV (2026-09-09) — this is being exploited in the wild.
Fixed in 7.0.18, 7.0.6, 7.2.12, 7.2.7 — upgrade to this release or later.
CVEs: CVE-2025-25249.

What it is

CVE-2025-25249 is a heap-based buffer overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE. Specially crafted packets sent to the affected component trigger the overflow, allowing execution of unauthorised code or commands.

Improper Authentication of FortiPAM Server

Tue, 08 Sep 2026 07:00:00 +0000

🚨SEVERITY: CRITICAL — CVSS 9.1Security Advisory

TL;DR 📌

CVSSv3 Score: 9.1 An improper authentication vulnerability [CWE-287] in the Fortinet Privileged Access Agent Chrome Extension may allow a remote unauthenticated attacker to proxy a user’s browser traffic through attacker controlled servers if the user visits a malicious website. Revised on 2026-09-08 00:00:00
Highest CVSS: 9.1 (Critical).
Check the advisory for fixed releases — remediation detail is in the vendor link below.

What it is

Fortinet has published an advisory for an improper authentication weakness (CWE-287) in the Fortinet Privileged Access Agent Chrome Extension, the browser component associated with FortiPAM. The flaw carries a CVSS score of 9.1, rated critical.