VulnSocial

CVE-2025-53379Disclosure(fortinet / fortiauthenticator)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch fortinet fortiauthenticator systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.

fortinet CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-125

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • fortiauthenticator

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 4 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • Peaked 3d ago at 2 mentions (2026-07-14); latest day: 1
  • 5 total mentions across 4 days

Affected systems

Vendors
fortinet
Products
fortiauthenticator

Deep dive

Activity timeline5 mentions / 4d
01122Mentions · 2026-07-14: 2Mentions · 2026-07-15: 1Mentions · 2026-07-27: 1Mentions · 2026-09-30: 1Patch / Workaround · 2026-07-15: 1Patch / Workaround · 2026-09-30: 1Technical Details · 2026-07-14: 2Technical Details · 2026-07-15: 1Technical Details · 2026-09-30: 107-1407-1507-2709-30
Signal classification2 categories
Disclosure
360.0%
Patch
240.0%
Referenced assets6 URLs
Classification over time
DateTotalLabels
2026-07-142
Disclosure2
2026-07-151
Patch1
2026-07-271
Disclosure1
2026-09-301
Patch1
Full discourse5 posts
  • にゃん☆たく/takumi.a@taku888infinity
    Disclosure

    今日のパッチチューズデー（MS一旦割愛） ◆Ivanti（クリティカルなし） CVE-2026-14903　Xtractionのパストラバーサルで任意ファイル読取 https://hub.ivanti.com/s/article/Security-Advisory-Ivanti-Xtraction-CVE-2026-14902-CVE-2026-14903?l… ◆Fortinet（クリティカルなし） CVE-2025-53379　FortiAuthenticator GUIの境界外読取り CVE-2026-59835　FortiSandboxのVNC無認証アクセス https://www.fortiguard.com/psirt?filter=1&version=&severity=5&severity=4&severity=3&severity=2 ◆SAP CVE-2026-44747　NetWeaver ABAPのメモリ破損で任意コード実行恐れ CVE-2026-27690　SAP ApprouterのHTTPリクエストスマグリング CVE-2026-44761　Commerce Cloudのサンプル認証情報が残存 CVE-2026-40128　NetWeaver Javaのディレクトリトラバーサル https://support.sap.com/en/my-support/knowledge-base/security-notes-news/july-2026.html ◆Adobe（今日多すぎ） Adobe ColdFusion（APSB26-82） CVE-2026-48318：パストラバーサルによる任意コード実行  CVE-2026-48322：コードインジェクションによる任意コード実行 CVE-2026-48284：入力検証不備による任意コード実行 CVE-2026-48321：認可不備による権限昇格 CVE-2026-48325：認証不備による任意コード実行  CVE-2026-48319：パストラバーサルによる任意コード実行  CVE-2026-48324：SQLインジェクションによる任意コード実行  CVE-2026-48327：認可不備による任意コード実行 CVE-2026-48320：反射型XSSによる権限昇格  CVE-2026-48328：入力検証不備による保護機能回避  CVE-2026-48332：SSRFによる保護機能回避  CVE-2026-48338：パストラバーサルによる任意ファイル読取 Adobe Commerce（APSB26-73） CVE-2026-48356：危険ファイルアップロードによる権限昇格 CVE-2026-48358：出力処理不備による任意コード実行 CVE-2026-47994：格納型XSSによる権限昇格 CVE-2026-47988：認可不備による保護機能回避 CVE-2026-47984：認可不備による保護機能回避 CVE-2026-47995：B2B機能の格納型XSSによる権限昇格 CVE-2026-47996：認可不備による保護機能回避 CVE-2026-47992：入力検証不備による権限昇格 Adobe Experience Manager（APSB26-74） CVE-2026-48259：SSRFによる任意コード実行 CVE-2026-48359：XXEによる任意コード実行 CVE-2026-48252：認証不備による保護機能回避 CVE-2026-48310：パストラバーサルによる任意読取 https://helpx.adobe.com/security.html

    Post summary

    The post catalogs a series of 2026 CVEs across multiple vendors, providing concise technical descriptors without offering PoC, exploit details, or patch information.

    000421.6K
    11.8K followersView on X
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH Severity: CVE-2025-53379 (CVSS 7.5) Fortinet FortiAuthenticator 6.5.x & 6.6.0-6.6.2 vulnerable to unauthenticated out-of-bounds read. Remote attackers can retrieve sensitive info via crafted requests. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/N7oBYCcJGP

    Post summary

    The tweet discloses CVE-2025-53379 affecting Fortinet FortiAuthenticator with a CVSS 7.5, describing an unauthenticated out-of-bounds read, and urges immediate patching.

    0000069
    143 followersView on X
  • CERT-PY@CERTpy
    Disclosure

    ⚠️ Vulnerabilidades en productos Fortinet ❗ CVE-2026-59835 ❗ CVE-2025-53379 ➡️ Más info: https://www.cert.gov.py/vulnerabilidades-en-productos-fortinet-11/ https://t.co/fR25yqHlwE

    Post summary

    The post announces the discovery of two Fortinet-related CVEs and directs readers to additional information via a link, without providing technical or exploit details.

    00000211
    6.7K followersView on X
  • Merge News@mergenewsapp
    Patch

    FortiAuthenticator has a critical bug (CVE-2025-53379) letting unauthenticated attackers steal sensitive data. Patch now to secure your network. #vulnerability #fortinet #fortiauthenticator #networksecurity

    Post summary

    The post alerts users to CVE-2025-53379 in FortiAuthenticator, noting unauthenticated attackers can steal sensitive data and urges applying the available patch.

    0000026
    22 followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2025-53379 A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versi… CVSS 7.5 Full analysis → https://sec.kaitan.id/cves/CVE-2025-53379 #Fortinet #CyberSecurity #InfoSec

    Post summary

    The tweet announces the discovery of CVE-2025-53379, an out-of-bounds read vulnerability in FortiAuthenticator with a CVSS score of 7.5, and directs readers to a full analysis link.

    0000039
    88 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appfortinetfortiauthenticator---

Explore more

Back to dashboardfortinet CVEsfortiauthenticator vulnerabilities