CVE-2025-49813: OS Command Injection
An improper neutralization of special elements used in an OS Command ("OS Command Injection") vulnerability [CWE-78] in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a remote and authenticated attacker with low privilege to execute unauthorized code via specifically crafted HTTP parameters.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49813?
CVE-2025-49813 has been rated as a critical vulnerability due to its potential for unauthorized code execution.
How do I fix CVE-2025-49813?
To fix CVE-2025-49813, upgrade Fortinet FortiADC to versions 7.1.2 or higher, or 7.2.1 or higher.
Who is affected by CVE-2025-49813?
CVE-2025-49813 affects users of Fortinet FortiADC version 7.2.0 and earlier versions up to 7.1.1.
What types of attacks does CVE-2025-49813 allow?
CVE-2025-49813 allows remote, authenticated attackers to execute unauthorized commands on the affected system.
What components of Fortinet FortiADC are vulnerable in CVE-2025-49813?
The vulnerability in CVE-2025-49813 arises from improper neutralization of special elements in OS command execution.