Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-57740

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.

Published

2025-10-14T16:15:40.293

Last Modified

2025-10-15T17:22:47.243

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-122
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiproxy < 7.4.4 Yes
Application fortinet fortiproxy < 7.6.3 Yes
Operating System fortinet fortipam < 1.4.3 Yes
Operating System fortinet fortipam 1.5.0 Yes
Operating System fortinet fortios < 7.2.11 Yes
Operating System fortinet fortios < 7.4.8 Yes
Operating System fortinet fortios < 7.6.3 Yes
References