CVE-2025-47294: Fortinet FortiOS

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemon via a specially crafted request.

Affected products

• Fortinet FortiOS: from 6.4.0, before 7.0.15 (fixed in 7.0.15); from 7.2.0, before 7.2.8 (fixed in 7.2.8)

Published 2025-05-28. Last modified 2026-06-17.