FortiOS and FortiSASE OSPF flaw lets unauthenticated attackers send LSAs
Fortinet rates the CWE-305 weakness 9.3; the notice gives no versions, fix, or exploitation status.
Stories per day · 30 days
Relatedfortinet5fortimanager4authentication-bypass2fortianalyzer2authorization-bypass1certificate-validation1command-injection1cwe-6391fortios1ospf1radius1
5 stories, newest first · one card per story
Stories tagged #fortisase
FortiManager GUI flaw lets authenticated users run out-of-scope commands
Fortinet rates the CWE-639 GUI flaw CVSS 8.7; the advisory gives no versions, fix, or exploitation status.
Fortinet fortilogd spoofing flaw can disrupt high-availability state
CVSSv3 is 8.2 across Analyzer, Manager, and FortiSASE-Sovereign; no versions or exploitation are stated.
CISA Warns of Fortinet Heap-based Buffer Overflow Flaw Exploited in Attacks
CISA added actively exploited Fortinet CVE-2025-25249, a critical heap-based buffer overflow in FortiOS, FortiSwitchManager, and FortiSASE, to its KEV catalog.
4
Fortinet security advisory (AV26-023) - Update 1
CISA added Fortinet CVE-2025-25249, a heap-based buffer overflow in the cw_acd daemon, to its KEV catalog; Canadian Cyber Centre urges patching.
2