CVE-2025-54820

high Fortinet
CVSS v3 Base Score
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published: March 10, 2026
Last Modified: March 12, 2026
Vendor: Fortinet
Source: NVD

Description

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.

CWE

CWE-121

Affected Products

fortinet fortimanager

References

🔗 fortiguard.fortinet.com