🔴 EXPLOITED CVE-2025-25249: A heap-based buffer overflow in Fortinet FortiOS and FortiSwitchManager allows unauthorized code execution via crafted packets. It is listed in CISA KEV. Affected: FortiOS 6.4 through 7.6.3 and FortiSwitchManager 7.0 and 7.2 branches. Fix: upgrade to the patched releases. CISA due date September 12, 2026. https://www.cve.org/CVERecord?id=CVE-2025-25249 #CISAKEV #infosec #cybersecurity