{"revision":"ee9b22d50df445bb82b8f8a64be8ce20","evidence":{"cve":"CVE-2025-25249","kev":{"cve":"CVE-2025-25249","product":"Multiple Products","name":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomwareUse":false,"shortDescription":"Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.","vendor":"Fortinet","isMicrosoft":false,"products":["fortinet"],"advisoryUrl":"https://fortiguard.fortinet.com/psirt/FG-IR-25-084","publicExploit":null,"msrcUrl":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-25249","cisaUrl":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-25249"},"epss":null,"observedAt":"2026-10-23T16:01:26.7735792+00:00","kevRetained":false,"reviewIdentity":"71c4a9a1f6c1ba34f3adbaf8"}}