CVE-2025-54820
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.
- Score
- CVSS 3.1 8.1 High
- Status
- Analyzed - psirt@fortinet.com
- Published
- 2026-03-10
- Last modified
- 2026-03-12
- Weaknesses
- CWE-121, CWE-787
Affected products
References
- https://fortiguard.fortinet.com/psirt/FG-IR-26-098