CVE-2025-31365

CVSS 3.1: 7.1 high
EPSS: <1%p18
Published: Oct 14, 2025 · Oct 14, 2025
Modified: Oct 8, 2026

Analyze CVE-2025-31365 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2.8 may allow an unauthenticated attacker to execute arbitrary code on the victim's host via tricking the user into visiting a malicious website.

Vendors: fortinet

Products: forticlient

Weakness: CWE-94

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news

1 story

⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025RansomwareCVE-2025-25257 CVE-2025-25251 CVE-2025-31365+362