Back Cybersecuritynews

FortiOS and FortiSwitchManager Vulnerability Allows Remote Arbitrary Code Execution

Cybersecuritynews •Guru Baran • January 13, 2026

Fortinet has disclosed a critical heap-based buffer overflow vulnerability (CWE-122) in the cw_acd daemon of FortiOS and FortiSwitchManager. This flaw enables a remote, unauthenticated attacker to execute arbitrary code or commands by sending specially crafted requests over the network. Organizations relying on Fortinet’s firewalls, secure access service edge (SASE) solutions, and switch management tools face […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiOS and FortiSwitchManager Vulnerability Enables Remote Code Execution Fortinet disclosed a critical heap-based buffer overflow vulnerability in the cw_acd daemon of FortiOS and FortiSwitchManager, tracked as CVE-2025-25249. This flaw allows remote unauthenticated attackers to execute arbitrary code on affected systems, posing a significant risk to organizations using Fortinet's products. The vulnerability has a CVSS v3.1 score of 7.4. 3 sources 57

FortiOS and FortiSwitchManager Vulnerability Allows Remote Arbitrary Code Execution

The full story

Extracted Entities

Platforms (2)

Vulnerabilities (1)