Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-54973

A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the FortiCloud SSO authorization via crafted FortiCloud SSO requests.

Published

2025-10-14T16:15:39.703

Last Modified

2025-10-22T16:31:59.647

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 5.3 (MEDIUM)

Weaknesses
  • Type: Secondary
    CWE-362
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortianalyzer < 7.0.14 Yes
Application fortinet fortianalyzer < 7.2.11 Yes
Application fortinet fortianalyzer < 7.4.7 Yes
Application fortinet fortianalyzer < 7.6.3 Yes
References