CVE-2025-57740

score

<0.1

cvss

7.5

epss

0.7%

published

2025-10-14

kev added

—

first seen

2026-10-21

FortiOS <= 7.6.2, <= 7.4.7, <= 7.2.10, 7.0 all versions, 6.4 all versions; FortiPAM <= 1.5.0, <= 1.4.2, 1.3, 1.2, 1.1, 1.0 all versions; and FortiProxy <= 7.6.2, <= 7.4.3, 7.2, 7.0 all versions contain a heap-based buffer overflow caused by crafted RDP bookmark connection requests, letting authenticated users execute unauthorized code.