Skip to content
OpenAdvisories
Medium · 4.0 CVE-2025-24477 EUVD-2025-21420GHSA-36g4-wrrw-63fh

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.…

Published Jul 15, 2025 · Updated Feb 10, 2026 · Assigned by fortinet

Description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command

Affected products

VendorProductAffectedFixed
Fortinet FortiOS 7.6.0 – ≤ 7.6.2, 7.4.0 – ≤ 7.4.7, 7.2.4 – ≤ 7.2.12 —

Advisories 1

References