Medium severity6.5NVD Advisory· Published Apr 14, 2026· Updated May 12, 2026

CVE-2025-53847

Description

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets.

Affected products

Fortinet/Fortios
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Range: >=6.2.9,<7.0.18

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

fortiguard.fortinet.com/psirt/FG-IR-26-125nvdVendor Advisory
cert-portal.siemens.com/productcert/html/ssa-975644.htmlnvd

News mentions

Thus Spoke…The Gentlemen
Check Point Research · May 13, 2026
The State of Ransomware – Q1 2026
Check Point Research · May 11, 2026
Post-quantum encryption for Cloudflare IPsec is generally available
Cloudflare Blog · Apr 30, 2026

cvss	0.423
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000