CVE-2025-53844Disclosure(fortinet / fortios)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch fortinet fortios systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

fortinet CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://fortiguard.fortinet.com/psirt/FG-IR-26-123

Other references

https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Weakness type (CWE)

CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

fortios

Threat summary

Patch or workaround signal is available
3 mentions across 3 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 3 signals
Disclosure: 2 classified signals
Peaked 2d ago at 1 mentions (2026-05-12); latest day: 1
3 total mentions across 3 days

Affected systems

Vendors

fortinet

Products

fortios

Deep dive

Activity timeline3 mentions / 3d

Signal classification2 categories

Disclosure

266.7%

Patch

133.3%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-12	1	Disclosure1
2026-05-14	1	Disclosure1
2026-05-19	1	Patch1

Full discourse3 posts

CCB Alert@CCBalert147d
Disclosure
Warning: 1 critical, 1 high, 3 medium vulnerabilities in #Fortinet #FortiOS #FortiSandbox #FortiAP #FortiAnalyzer #FortiManager #CVE-2026-26083 #CVE-2025-53844 #CVE-2025-53870 #CVE-2025-53680 #CVE-2025-67604 CVSS: 9.8-5.3 See: https://www.fortiguard.com/psirt & https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios
Post summary
The tweet warns of four Fortinet-related CVEs of varying severity, citing advisories but providing no exploitation code, active use claims, or patch details.
010101.6K
7.2K followersView on X
iototsecnews@iototsecnews143d
Patch
Fortinet 製品の脆弱性群が FIX：Critical な認可バイパスの脆弱性への対応が急務 https://iototsecnews.jp/2026/05/12/fortinet-patches-five-vulnerabilities-across-fortiap-fortios-and-enterprise-products/ 今回のセキュリティ・アドバイザリでは、認可の不備や入力値の検証不足が主な原因となっています。特に CVE-2026-26083 は、本来必要なはずの認可プロセスが欠落していたため、外部から認証なしで機密データに触れられてしまう状態でした。また CVE-2025-53680 や CVE-2025-53870 では、コマンド実行時の特殊文字に対する不適切な無効化が原因で、意図しない命令が実行されるリスクが生じています。ほかにも CVE-2025-67604 のように危険な関数の使用が原因となるものや、 CVE-2025-53844 のようにメモリへの書き込み範囲を正しく制限できていないケースも含まれています。ご利用のチームは、ご注意ください。#CVE202553680 #CVE202553844 #CVE202553870 #CVE202567604 #CVE202626083 #FortiAnalyzer #FortiAP #FortiManagerAPI #Fortinet #FortiOS #Vulnerability
Post summary
The advisory alerts that several Fortinet products (FortiAP, FortiOS, etc.) are vulnerable to authorization bypass, command injection, and memory issues, and urges immediate patching.
01000158
489 followersView on X
Kaitan ID Security@KaitanSecurity149d
Disclosure
⚠️ HIGH — CVE-2025-53844 A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0… CVSS 8.8 Full analysis → https://sec.kaitan.id/cves/CVE-2025-53844 #Fortinet #CyberSecurity #InfoSec
Post summary
The post announces an out‑of‑bounds write vulnerability in Fortinet FortiOS with CVSS 8.8 and provides a link to a full analysis, but does not offer PoC code, exploit details, active exploitation evidence, or patch information.
00000932
90 followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	fortinet	fortios	-	-	-

Explore more

Back to dashboard fortinet CVEs fortios vulnerabilities