VYPR
← All advisories
Medium severity6.7NVD Advisory· Published May 12, 2026· Updated May 15, 2026

CVE-2025-53680

CVE-2025-53680

Description

An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-U 7.0.0 through 7.0.5, FortiAP-U 6.2 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Fortinet/FortiAP-S
    cpe:2.3:a:fortinet:fortiap:*:*:*:*:*:*:*:*
    Range: >=6.4.0,<7.4.6
  • Fortinet/FortiAP-U
    cpe:2.3:a:fortinet:fortiap-u:*:*:*:*:*:*:*:*
    Range: >=7.0.0,<7.0.6
  • Fortinet/FortiAP-W2
    cpe:2.3:a:fortinet:fortiap-w2:*:*:*:*:*:*:*:*
    Range: >=7.2.0,<7.4.5
  • Fortinet/Fortinetllm-fuzzy
    Range: >=7.6.0 <=7.6.2, >=7.4.0 <=7.4.5, 7.2 all, 7.0 all, 6.4 all

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.