Skip to main content

Fortinet Releases Security Updates for FortiOS and FortiSwitch Manager

Advisory addresses a vulnerability which if exploited could allow a remote unauthenticated attacker to perform arbitrary code or command execution

Threat ID:
CC-4736
Threat Severity:
Medium
Published:
14 January 2026 1:34 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Advisory addresses a vulnerability which if exploited could allow a remote unauthenticated attacker to perform arbitrary code or command execution

Threat details

Introduction

Fortinet has released security updates to address a high severity vulnerability in FortiOS and FortiSwitch Manager. Successful exploitation by a remote unauthenticated attacker could allow for arbitrary code or command execution.

  • CVE-2025-25249 - Heap-Based Buffer Overflow vulnerability - CVSSv3 score: 7.4

Remediation advice

Affected organisations are encouraged to review the Fortinet PSIRT FG-IR-25-084 and apply the relevant updates as soon as possible.

Definitive source of threat updates

Last edited: 14 January 2026 1:34 pm