Is CVE-2025-25249 being actively exploited?

Yes. CVE-2025-25249 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added on September 9, 2026.

What is the CVSS score for CVE-2025-25249?

CVE-2025-25249 has a CVSS 3.1 base score of 8.1 (HIGH).

CVE-2025-25249

HIGH · CVSS 8.1CISA KEV: actively exploitedEPSS 3.8%EU EUVD: exploited

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Key facts

CVSS score: 8.1 (v3.1)
Severity: HIGH
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-122
EPSS score: 3.8% (90th percentile)
In CISA KEV: Yes, added September 9, 2026
In EU EUVD: Yes (EUVD-2026-2223)
Published: January 13, 2026
NVD last modified: October 7, 2026
Status: Analyzed

CISA Known Exploited Vulnerability

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Added to the KEV catalog on September 9, 2026; federal remediation due September 12, 2026.

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2026-2223 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on October 15, 2026.

View on the EU Vulnerability Database

Affected products

fortinet / fortios
fortinet / fortisase
fortinet / fortisase
fortinet / fortiswitchmanager
siemens / ruggedcom ape1808
siemens / ruggedcom ape1808 firmware

Certified products that may be affected

1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.

Fortinet, Inc. FortiOS 7.0.7 - Fortinet, Inc. - Common Criteria NSCIB-CC-0590233-CR - active

References

https://cert-portal.siemens.com/productcert/html/ssa-864900.html(Third Party Advisory)
https://fortiguard.fortinet.com/psirt/FG-IR-25-084(Mitigation, Vendor Advisory)
https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/(Exploit, Third Party Advisory)
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249(US Government Resource)

Last updated October 9, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain