FortiOS and FortiSwitchManager Flaw Allows Remote Code Execution

Gbhackers •Divya • January 14, 2026

A high heap-based buffer overflow vulnerability in the cw_acd daemon component of Fortinet’s FortiOS and FortiSwitchManager has been disclosed, enabling remote unauthenticated attackers to execute arbitrary code on affected systems. The vulnerability, tracked as CVE-2025-25249, carries a high CVSS v3.1 score of 7.4 and poses significant risk to enterprise network infrastructure. Vulnerability Details The flaw […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiOS and FortiSwitchManager Vulnerability Enables Remote Code Execution Fortinet disclosed a critical heap-based buffer overflow vulnerability in the cw_acd daemon of FortiOS and FortiSwitchManager, tracked as CVE-2025-25249. This flaw allows remote unauthenticated attackers to execute arbitrary code on affected systems, posing a significant risk to organizations using Fortinet's products. The vulnerability has a CVSS v3.1 score of 7.4. 3 sources 57

Extracted Entities

FortiOS and FortiSwitchManager Flaw Allows Remote Code Execution

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Platforms (2)