Skip to content
VulniPulse
Sign in
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2025-53847

CVE-2025-53847: 1 tracked advisory record across Fortinet. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

NVD detail CVE.org

Vendor advisory comparison

Fortinet

1 advisory
  • Advisory severityMedium6.2

    Medium [CVE-2025-53847] Missing Authentication for critical function in CAPWAP daemon

    FG-IR-26-125Source published Source updated

    CVSSv3 Score: 6.2 A missing authentication for critical function vulnerability [CWE-306] in FortiOS and FortiSwitchManager CAPWAP daemon may allow a local unauthenticated attacker on the same local IP subnet to write device configuration via specially crafted requests. To be successful, this attack requires the targeted FortiGate device to run a specific, non default configuration. Revised on 2026-04-14 00:00:00

    Related products — impact not confirmed
    • FortiOS
    • FortiGate
    • FortiSwitch
    Source-reported affected versions
    • FortiOS 7.6: 7.6.0 through 7.6.3
    • FortiOS 7.4: 7.4.0 through 7.4.8
    • FortiOS 7.2: 7.2.0 through 7.2.11
    • FortiOS 7.0: 7.0.0 through 7.0.17

    2 more entries in the full advisory.

    Source-reported fixed versions
    • FortiOS 7.6: 7.6.4
    • FortiOS 7.4: 7.4.9
    • FortiOS 7.2: 7.2.12
    • FortiOS 7.0: 7.0.18

    2 more entries in the full advisory.

    Mitigation guidance
    • Upgrade per the Affected/Solution table: FortiOS 7.6: 7.6.4; FortiOS 7.4: 7.4.9; FortiOS 7.2: 7.2.12; FortiOS 7.0: 7.0.18; FortiOS 6.4: migrate to a fixed release; ….
    Workarounds
    • Disable security fabric access into interface.Only allow legit devices in Wifi Controller > Managed FortiAPsRemove inter-controller-peer elements in config wireless-controller inter-controller configuration
    • Warning :If auto-auth-extension-device is enabled in config system interface, any devicecan be authorized and then the vulnerability can be exploited without administratorauthorization.Please note that auto-auth-extension-device is disabled by defaultIf inter-controller-peer is set, it is strongly advised to change the inter-controller-key setting, even for fixed versions.
    Full advisory and evidenceOpen source bulletin

Android app · Google Play

Monitor future Fortinet CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features