VulnSocial

CVE-2025-48418Disclosure(fortinet / fortianalyzer)

LOWCVSS 7.2 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.10, FortiAnalyzer Cloud 7.0.1 through 7.0.14, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2.0 through 7.2.10, FortiManager 7.0.0 through 7.0.14, FortiManager 6.4 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14, FortiManager Cloud 6.4 all versions may allow a remote authenticated read-only admin with CLI access to escalate their privilege via use of a hidden command.

fortinet CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-912

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fortianalyzer
  • fortianalyzer_cloud
  • fortimanager
  • fortimanager_cloud

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-03-17)
  • 3 total mentions across 2 days

Affected systems

Vendors
fortinet
Products
fortianalyzerfortianalyzer_cloudfortimanagerfortimanager_cloud

1 version affected across 4 products

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-03-13: 1Mentions · 2026-03-17: 2Technical Details · 2026-03-17: 203-1303-17
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-03-131
General1
2026-03-172
Disclosure2
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2025-48418 A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyz… https://www.cve.org/CVERecord?id=CVE-2025-48418 ----- Traducción: CVE-2025-48418 Una… http://infoflow.cloud`

    Post summary

    The tweet announces CVE-2025-48418, a hidden functionality vulnerability affecting multiple Fortinet FortiAnalyzer firmware versions, and links to the official CVE record.

    00000115
    60 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2025-48418 A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyz… https://www.cve.org/CVERecord?id=CVE-2025-48418

    Post summary

    The text announces CVE-2025-48418 as a hidden functionality issue in multiple FortiAnalyzer releases, with no proof‑of‑concept, exploit, or active exploitation evidence provided.

    00000278
    56.8K followersView on X
  • DailyCVE@dailycve
    General

    🔴 Fortinet FortiAnalyzer & FortiManager, Hidden Functionality Vulnerability, #CVE-2025-48418 (High) https://dailycve.com/fortinet-fortianalyzer-fortimanager-hidden-functionality-vulnerability-cve-2025-48418-high/

    Post summary

    The text announces a new Fortinet vulnerability (CVE‑2025‑48418) but provides no additional details such as exploit existence, patches, or technical specifics.

    00000120
    168 followersView on X
CPE platform detail5 entries

5 of 5 entries

PartVendorProductVersionTarget SWTarget HW
Appfortinetfortianalyzer---
Appfortinetfortianalyzer_cloud---
Appfortinetfortianalyzer_cloud7.6.2--
Appfortinetfortimanager---
Appfortinetfortimanager_cloud---

Explore more

Back to dashboardfortinet CVEsfortianalyzer vulnerabilities