CVE-2025-53844 HIGH

CVE-2025-53844

Vendor Fortinet
Product FortiOS
Weakness CWE-787
Published May 12, 2026
Last update June 9, 2026

CVSS base score

8.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

What the vulnerability does

01Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

Key dates

02Disclosure timeline

May 12, 2026 CVE published
June 9, 2026 Record updated