FortiOS and FortiSwitchManager Vulnerabilities Allow Remote Code Execution

Back Cyberpress

FortiOS and FortiSwitchManager Vulnerabilities Allow Remote Code Execution

Cyberpress • January 14, 2026

Share: View original

Fortinet has disclosed a critical heap-based buffer overflow vulnerability affecting multiple versions of FortiOS and FortiSwitchManager that ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiOS and FortiSwitchManager Vulnerability Enables Remote Code Execution Fortinet disclosed a critical heap-based buffer overflow vulnerability in the cw_acd daemon of FortiOS and FortiSwitchManager, tracked as CVE-2025-25249. This flaw allows remote unauthenticated attackers to execute arbitrary code on affected systems, posing a significant risk to organizations using Fortinet's products. The vulnerability has a CVSS v3.1 score of 7.4. 3 sources 57

Extracted Entities

Attack Types (1)

Remote Code Execution

Companies (1)

Platforms (2)

FortiOS FortiSwitchManager