CISA Warns of Fortinet Heap-based Buffer Overflow Flaw Exploited in Attacks

CISA added Fortinet CVE-2025-25249 — a heap-based buffer overflow affecting FortiOS, FortiSwitchManager, and FortiSASE — to its Known Exploited Vulnerabilities catalog after confirming active exploitation; organizations and federal agencies are directed to apply Fortinet mitigations or fixes, assess internet exposure, and perform forensic triage to investigate for potential compromise.