CVE-2025-53843 MEDIUM

CVE-2025-53843

Vendor Fortinet
Product FortiOS
Weakness CWE-121
Published November 18, 2025
Last update June 9, 2026

CVSS base score

6.9/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C

What the vulnerability does

01Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted packets

Key dates

02Disclosure timeline

November 18, 2025 CVE published
June 9, 2026 Record updated