CVE-2025-53847

Published: Apr 14, 2026Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected (4)

Products: Fortinet: Fortios

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 6.2.9 to 7.0.18
Fortinet Fortios	From 7.2.0 to 7.2.12
Fortinet Fortios	From 7.4.0 to 7.4.9
Fortinet Fortios	From 7.6.0 to 7.6.4

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-26-125

Source: psirt@fortinet.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-975644.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.