HackerFeeds

CyberSecurity News

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

SecurityWeek
· September 10, 2026
Vulnerabilities

AI summary

A high-severity vulnerability in Fortinet, tracked as CVE-2025-25249, has been exploited in attacks using the PivotC2 RAT. The flaw, which allows for unauthenticated code execution, was patched in January 2026.

Vulnerabilities mentioned

CVE-2025-25249
HIGH
CVSS 8.1
CISA KEV

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Read the full article at SecurityWeekwww.securityweek.com/fortinet-code-execution-flaw-exploited-in-pivotc2-rat-attacks/

This is an AI-generated brief aggregated by HackerFeeds for convenience and grounded in the source’s own summary; the related CVE, threat-group and country data is from HackerFeeds’ own indexes. The original article is the authoritative source — all rights belong to SecurityWeek.