Vulnerabilities in Fortinet Products · CIAD-2025-0050
CERT-In advisory CIAD-2025-0050 · 11 Dec 2025
Official title
CIAD-2025-0050 : Multiple Vulnerabilities in Fortinet Products
Official record
Open source pageSummary
Check the official recordWhat changed
CERT-In reports multiple vulnerabilities in various Fortinet products. These vulnerabilities allow attackers to gain escalated privileges, bypass security restrictions, execute arbitrary code, and obtain sensitive information. Affected products include FortiOS, FortiProxy, FortiSwitchManager, FortiAnalyzer, FortiManager, FortiPAM, FortiPortal, FortiWeb, and FortiAuthenticator. All end-user organizations and individuals using these products must apply the security updates provided by the vendor. Users should consult the official Fortinet PSIRT page for the complete list of affected versions and specific update instructions.
What you must do
- Apply appropriate updates as specified by the vendor.
Who is affected
- All end-user organizations and individuals using Fortinet products.
Document text
CERT-In Advisory CIAD-2025-0050
Multiple Vulnerabilities in Fortinet Products
Original Issue Date: December 11, 2025
Severity Rating: High
Software Affected
FortiOS
FortiProxy
FortiSwitchManager
FortiAnalyzer
FortiManager
FortiPAM
FortiPortal
FortiWeb
FortiAuthenticator
Associated components such as the FortiOS IPS engine
For the complete list of affected versions, refer to Fortinet's official PSIRT page.
https://fortiguard.fortinet.com/psirt
Overview
Multiple vulnerabilities have been reported in Fortinet products, which could be exploited by an attacker to gain escalated privileges, bypass security restrictions, execute arbitrary code and obtain sensitive information on the target system.
Target Audience:
All end-user organizations and individuals using Fortinet products.
Risk Assessment:
High risk of unauthorized access, data breaches, full system compromise.
Impact Assessment:
Potential for unauthorized access to sensitive user information.
Description
Fortinet provides cyber security solutions such as firewalls, endpoint security solutions, intrusion detection systems.
Multiple vulnerabilities exist in Fortinet products which could be exploited by an attacker to gain escalated privileges, bypass security restrictions, execute arbitrary code and obtain sensitive information.
Solution
Apply appropriate updates as mentioned in:
https://fortiguard.fortinet.com/psirt/FG-IR-24-133
https://fortiguard.fortinet.com/psirt/FG-IR-24-268
https://fortiguard.fortinet.com/psirt/FG-IR-25-411
https://fortiguard.fortinet.com/psirt/FG-IR-25-554
https://fortiguard.fortinet.com/psirt/FG-IR-25-616
https://fortiguard.fortinet.com/psirt/FG-IR-25-647
https://fortiguard.fortinet.com/psirt/FG-IR-25-945
https://fortiguard.fortinet.com/psirt/FG-IR-25-984
Vendor Information
Fortinet
https://fortiguard.fortinet.com/psirt
CVE Name
CVE-2024-40593
CVE-2024-47570
CVE-2025-57823
CVE-2025-59718
CVE-2025-59719
CVE-2025-59923
CVE-2025-62631
CVE-2025-64447
Source details
- Source
- Indian Computer Emergency Response Team
- Type
- advisory
- Published by source
- 11 Dec 2025
- Document number
- CIAD-2025-0050
- Issuing division
- CERT-In
- Coverage area
- cybersecurity