CVE-2025-53847CWE-306

CVE-2025-53847

Medium · published April 14, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
19.7
In the wild
Unconfirmed
What it is

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00283 · 19.7th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-04-14T20:16Z
Affected products (4)
ProductVersionsFixed in
fortinet/fortios≥ 6.2.9, < 7.0.187.0.18
fortinet/fortios≥ 7.2.0, < 7.2.127.2.12
fortinet/fortios≥ 7.4.0, < 7.4.97.4.9
fortinet/fortios≥ 7.6.0, < 7.6.47.6.4
References (2)
https://fortiguard.fortinet.com/psirt/FG-IR-26-125 · [email protected]https://cert-portal.siemens.com/productcert/html/ssa-975644.html · 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
EPSS history
Timeline
  • 14 APR 15:38Z
    A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through…
    cvelistv5