CVE-2025-47855

—1

CVSS 3.1

9.8 critical

EPSS

<1%p55

Published

Jan 13, 2026 (Jan 13, 2026)

Modified

Jun 17, 2026

Description

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.

Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news3 stories

Fortinet security advisory (AV26-023) - Update 1

CISA added Fortinet CVE-2025-25249, a heap-based buffer overflow in the cw_acd daemon, to its KEV catalog; Canadian Cyber Centre urges patching.

The Canadian Centre for Cyber Security updated advisory AV26-023, which relays January 2026 Fortinet advisories covering FortiFone, FortiOS, FortiSASE, FortiSIEM, and FortiSwitchManager. On September 9, 2026, CISA added CVE-2025-25249, a heap-based buffer overflow in the cw_acd daemon, to its Known Exploited Vulnerabilities catalog. Related Fortinet flaws include unauthenticated local configuration access (CVE-2025-47855) and unauthenticated remote command injection (CVE-2025-64155). Administrators should review the advisories and apply available updates.

Canadian Centre for Cyber SecuritySep 9, 19:57 UTC · 6d agoExploit / PoC in the wildCVE-2025-25249 CVE-2025-47855 CVE-2025-64155

Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Vulnerability CVE-2025-64155 CVE-2025-47855

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

Security AffairsJan 14, 18:07 UTC · Jan 14, 2026Exploit / PoC in the wildCVE-2025-64155 CVE-2025-47855