Warning: RCE vulnerability in Fortinet FortiOS and FortiSwitchManager. Patch Immediately!
ID: c20d6da2-9352-5df6-966e-b8abae28f892
STIX ID: report--c20d6da2-9352-5df6-966e-b8abae28f892
Threat Score
Fortinet FortiOS and FortiSwitchManager are affected by a heap-based buffer overflow (CVE-2025-25249) rated CRITICAL (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H). The advisory reports active exploitation since at least July 2026 delivering the PivotC2 remote access trojan to compromised devices and strongly recommends urgent patching and enhanced monitoring to detect related activity.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.