CVE-2025-22258

score

<0.1

cvss

6.5

epss

0.6%

published

2025-10-14

kev added

—

first seen

2026-10-21

Fortinet FortiSRA 1.4.0 through 1.4.2, FortiPAM 1.0.0 through 1.5.0, FortiProxy 7.4.0 through 7.6.1, FortiOS 7.0.2 through 7.6.2, and FortiSwitchManager 7.2.1 through 7.2.5 contain a heap-based buffer overflow caused by improper handling of specially crafted HTTP requests, letting attackers escalate privileges remotely, exploit requires crafted HTTP requests.