What is the CVSS score of CVE-2025-54820?

CVE-2025-54820 has a CVSS 3.1 base score of 8.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.0%.

Which versions of Fortimanager are affected by CVE-2025-54820?

FortiManager deployments (versions 6.4, 7.2.0-7.2.10, and 7.4.0-7.4.2) face an unpatched remote code execution vulnerability requiring immediate attention.

How to fix or mitigate CVE-2025-54820?

Within 24 hours: Inventory all FortiManager instances and their versions; disable the vulnerable service if operationally feasible or restrict network access to trusted administrators only. Within 7 days: Implement network segmentation to isolate FortiManager from untrusted networks; enable enhanced logging and monitoring for suspicious activity; contact Fortinet support for patch timeline and workarounds. Within 30 days: Apply security patch immediately upon vendor release; conduct forensic review of FortiManager access logs for indicators of exploitation; perform vulnerability reassessment post-patching.

Fortimanager CVE-2025-54820

HIGH

Stack-based Buffer Overflow (CWE-121)

2026-03-10 psirt@fortinet.com

Fortinet Buffer Overflow Stack Overflow Fortimanager

8.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.1 HIGH

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

High

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Mar 10, 2026 - 18:17 nvd

HIGH 8.1

DescriptionCVE.org

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.

AnalysisAI

Technical ContextAI

Classified as CWE-121 (Stack-based Buffer Overflow). Affects Fortimanager. A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.