Fortinet FortiOS 缓冲区错误漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Fortinet%20FortiOS/%EF%BC%88CVE-2018-13381%EF%BC%89Fortinet%20FortiOS%20%E7%BC%93%E5%86%B2%E5%8C%BA%E9%94%99%E8%AF%AF%E6%BC%8F%E6%B4%9E/
• https://avd.aliyun.com/detail?id=AVD-2023-42789
• https://cve.imfht.com/poc_detail/3316f976d09e32abe59c212898c8e3a81124b4a0
• https://avd.aliyun.com/detail?id=AVD-2020-12820
• https://wiki.96.mk/Web%E5%AE%89%E5%85%A8/Fortinet%20FortiOS/%EF%BC%88CVE-2018-13383%EF%BC%89Fortinet%20FortiOS%20%E7%BC%93%E5%86%B2%E5%8C%BA%E9%94%99%E8%AF%AF%E6%BC%8F%E6%B4%9E/
• https://www.secrss.com/articles/13001
• https://www.sxxdckj.com/cms/a/Fortinet-FortiOS-huan-chong-qu-yi-chu-lou-dong-CNVD-2025-03518.html
• https://zeropath.com/blog/cve-2025-58413-fortios-buffer-overflow-summary
• https://www.fortiguard.com/psirt/FG-IR-22-398
• https://fortiguard.fortinet.com/psirt/FG-IR-25-084
• https://nvd.nist.gov/vuln/detail/CVE-2025-25249
• https://zeropath.com/blog/cve-2025-53843-fortios-buffer-overflow-summary

Related Vulnerabilities

• PoCCVE-2026-39808: Fortinet FortiSandbox - Command Injection
• Fortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞（CVE-2026-39808）
• PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL Injection
• PoCCVE-2019-5591: FortiOS - Insecure LDAP Configuration Detection
• PoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin Privilege
• Fortinet FortiOS等 签名验证不当漏洞
• Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446/CVE-2025-58034）
• Fortinet FortiWeb 需授权 命令注入漏洞
• Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞（CVE-2025-64446）