CVE-2025-25249

Fortinet products contain an unpatched heap-based buffer overflow allowing remote code execution via crafted packets.

An unpatched heap-based buffer overflow in Fortinet FortiOS, FortiSwitchManager, and FortiSASE allows attackers to execute arbitrary code via specially crafted packets. This is a critical failure for DIB organizations relying on Fortinet network security hardware, as it directly enables remote code execution and is now actively exploited in the wild. Organizations must immediately patch these products and assess their exposure to avoid becoming a target for ransomware or data breaches.

Shame score — A known, unpatched vulnerability in critical network security hardware that is actively exploited in the wild, demonstrating severe negligence in patch management and leaving DIB networks exposed to remote code execution.