Get real-time updates on Telegram
CVE-2025-48839: fortiadc 8.0.0; +1 more affected products
CVE-2025-48839. CVSS 3.1 base score 6.6 (MEDIUM, Vendor/CNA). EPSS 0.00358 (percentile 0.28034), scored 17-Oct-2026.
Affected technology
fortiadc · from 6.2.0 (inclusive), before 7.4.8 (exclusive)
fortinet
fortiadc · from 7.6.0 (inclusive), before 7.6.3 (exclusive)
fortinet
fortiadc · 8.0.0
fortinet
FortiADC · 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2.0 through 7.2.8, 7.1.0 through 7.1.5, 7.0.0 through 7.0.6, 6.2.0 through 6.2.6
Fortinet
Component: Not specified by the source
Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required
What an attacker can do
An authenticated attacker may execute arbitrary code via specially crafted HTTP requests. Vendor/CNA’s CVSS 3.1 assessment (base score 6.6/10) rates confidentiality, integrity and availability impact as high.
- CWE
- CWE-787
- CCR priority
- 26.5 /100 (P4)
- CVSS 3.1
- 6.6 /10 · CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · Vendor/CNA
- EPSS
- 0.00358 · percentile 0.28034 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-18 20:23:06.032219+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2025-48839.html