CVE-2025-53844CWE-787

CVE-2025-53844

High · published May 12, 2026

CVSS v3.1

8.8

EPSS

Percentile

46.1

In the wild

Unconfirmed

What it is

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

The record

Technical detail

CVSS v3.1: 8.8 · HIGH
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0: Not supplied
EPSS: 0.00564 · 46.1th percentile
Weakness: CWE-787 · Out-of-bounds Write
Published: 2026-05-12T22:16Z

Affected products (3)

Product	Versions	Fixed in
fortinet/fortios	≥ 7.2.0, < 7.2.12	7.2.12
fortinet/fortios	≥ 7.4.0, < 7.4.9	7.4.9
fortinet/fortios	≥ 7.6.0, < 7.6.4	7.6.4

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-26-123 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-864900.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

EPSS history

Timeline

12 MAY 16:54Z
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to…
cvelistv5