CVE-2025-53847

score

<0.1

cvss

6.5

epss

0.3%

published

2026-04-14

kev added

—

first seen

2026-10-21

Fortinet FortiOS 6.2.9 through 6.2.17, 6.4 all versions, 7.0.0 through 7.0.17, 7.2.0 through 7.2.11, 7.4.0 through 7.4.8, and 7.6.0 through 7.6.3 contain a command injection caused by missing authentication for critical functions, letting attackers execute unauthorized code or commands remotely, exploit requires no authentication.