CVE-2025-25256

CVSS 9.8 CRITICALEPSS 56.2%CWE-78

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:X/RC:C

Productos afectados

Fortinet · FortiSIEM

PoCs públicas encontradas — 1

cve_referencegithub.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256★ 19

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://fortiguard.fortinet.com/psirt/FG-IR-25-152 https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256 https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/