Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Critical FortiSIEM flaw under active exploitation, Fortinet warns

Security Affairsby @securityaffairs ()1 min read3
Analyze CVE-2025-25256 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-25256
Unauthenticated OS command injection in Fortinet FortiSIEM (CVE-2025-25256)
9.860%

From the original article

1 min read at securityaffairs.com

Fortinet warns of a critical FortiSIEM vulnerability, tracked as CVE-2025-25256, that is actively exploited in attacks in the wild. Fortinet warns customers of a critical vulnerability, tracked as CVE-2025-25256 (CVSS score of 9. 8), affecting FortiSIEM for which an exploit exists in the wild.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.