VULNERABILITY INTELLIGENCE

CVE-2025-48839

CVSS score6.6 MEDIUM
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-11-18
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.

Weakness classification

  • psirt@fortinet.com: CWE-787

Primary references