NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability1 · 1 read

CVE-2024-48887

CVSS 3.1: 9.8 critical
EPSS: 15%p96
Published: Apr 8, 2025 · Apr 8, 2025
Modified: Jun 17, 2026

Analyze CVE-2024-48887 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request

Vendors: fortinet

Products: fortiswitch

Weakness: CWE-620

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (14.9%)

In the news

5 stories

⚡ Weekly Recap: Windows 0-Day, VPN Exploits, Weaponized AI, Hijacked Antivirus and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025RansomwareCVE-2025-29824 CVE-2024-11859 CVE-2025-3102+171 · 1 read

60

Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixed

Help Net SecurityApr 13, 00:00 UTC · Apr 13, 2025VulnerabilityExploitedCVE-2025-29824 CVE-2025-31334 CVE-2024-48887+23

60

FortiSwitch vulnerability may give attackers control over vulnerable devices (CVE-2024-48887)

Help Net SecurityApr 10, 00:00 UTC · Apr 10, 2025VulnerabilityExploitedCVE-2024-488872

60

Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwords

Security AffairsApr 9, 17:51 UTC · Apr 9, 2025VulnerabilityCVE-2024-48887 CVE-2024-260102

60

Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change Flaw

The Hacker NewsApr 8, 17:53 UTC · Apr 8, 2025VulnerabilityCVE-2024-488872 · 1 read

60