Fortinet FortiManager fgtupdates Flaw Enables Attackers to Execute Malicious Commands Remotely

Fortinet issued an advisory for CVE-2025-54820: a stack-based buffer overflow in the FortiManager `fgtupdates` service that can allow remote, unauthenticated command execution on affected versions (FortiManager 6.4 all; 7.2.0–7.2.10; 7.4.0–7.4.2). Fortinet recommends upgrading to fixed releases (7.4.3 or later, 7.2.11 or later) or temporarily disabling the `fgtupdates` service via CLI; FortiManager 7.6 and FortiManager Cloud are not affected and no active exploitation is reported.