VYPR
← All advisories
Medium severity6.7NVD Advisory· Published May 12, 2026· Updated Jul 8, 2026

CVE-2025-53680

CVE-2025-53680

Description

An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-U 7.0.0 through 7.0.5, FortiAP-U 6.2 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Fortinet/FortiAP-U2 versions
    cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.6
    • (no CPE)range: 7.0.0 through 7.0.5, 6.2 all versions
  • Fortinet/FortiAP-W22 versions
    cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*range: >=7.2.0,<7.4.5
    • (no CPE)range: 7.4.0 through 7.4.4, 7.2 all versions, 7.0 all versions
  • Fortinet/FortiAP-S
    cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*
    Range: >=6.4.0,<7.4.6
  • Fortinet/FortiAP-Cllm-fuzzy
    Range: 7.6.0 through 7.6.2, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.