CVE-2025-48839: Medium severity Fortinet FortiADC vulnerability

Q: What is the severity of CVE-2025-48839?

CVE-2025-48839 is classified as a high severity vulnerability due to its potential for arbitrary code execution.

Q: Who is affected by CVE-2025-48839?

CVE-2025-48839 affects multiple versions of Fortinet's FortiADC, specifically versions 6.2 and above up to 8.0.0.

Q: How do I fix CVE-2025-48839?

To mitigate CVE-2025-48839, upgrade to the latest version of FortiADC that addresses this vulnerability.

Q: What type of vulnerability is CVE-2025-48839?

CVE-2025-48839 is an Out-of-bounds Write vulnerability, which allows attackers to manipulate memory.

Q: Can CVE-2025-48839 be exploited remotely?

Yes, CVE-2025-48839 can be exploited remotely through specially crafted HTTP requests by an authenticated attacker.

Published Nov 18, 2025

Updated

An Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versions, 7.0 all versions, 6.2 all versions may allow an authenticated attacker to execute arbitrary code via specially crafted HTTP requests.

Affected Software

4 affected components

Fortinet FortiADC=8.0.0, >=7.6.0<7.6.3, >=7.4.0<7.5.0, >=7.2, >=7.1, >=7.0, >=6.2

Fortinet FortiADC>=6.2.0<7.4.8

Fortinet FortiADC>=7.6.0<7.6.3

Fortinet FortiADC=8.0.0

Remediation

Information

Upgrade to FortiADC version 8.0.1 or above Upgrade to FortiADC version 7.6.3 or above Upgrade to FortiADC version 7.4.8 or above

Event History

Nov 18, 2025

CVE Published

via MITRE·05:01 PM

Data Sourced

via MITRE·05:01 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-48839?

CVE-2025-48839 is classified as a high severity vulnerability due to its potential for arbitrary code execution.

Who is affected by CVE-2025-48839?