{"id":"CVE-2025-53744","title":"An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with h…","summary":"An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with h…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C","cvssSource":"cna","cwe":["CWE-266"],"vendor":"Fortinet","product":"FortiOS","affected":["FortiOS >= 7.6.0 <= 7.6.2","FortiOS >= 7.4.0 <= 7.4.7","FortiOS >= 7.2.0 <= 7.2.11","FortiOS >= 7.0.0 <= 7.0.17","FortiOS >= 6.4.0 <= 6.4.16"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2025-08-13T15:04:30.745204Z"},"published":"2025-08-12","updated":"2026-10-15","sourceUpdated":"2026-10-15T01:09:14.721Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-53744","references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-173","label":"https://fortiguard.fortinet.com/psirt/FG-IR-25-173"}],"tags":["cve.org"],"epss":0.0064,"epssPercentile":0.49441,"ingestedAt":"2026-10-15T05:52:46.070Z","slug":"CVE-2025-53744","body":"## Overview\n\nAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager.\n\n## Affected\n\n- `FortiOS >= 7.6.0 <= 7.6.2`\n- `FortiOS >= 7.4.0 <= 7.4.7`\n- `FortiOS >= 7.2.0 <= 7.2.11`\n- `FortiOS >= 7.0.0 <= 7.0.17`\n- `FortiOS >= 6.4.0 <= 6.4.16`\n\n## Remediation\n\nPlease upgrade to FortiOS version 7.6.3 or above \nPlease upgrade to FortiOS version 7.4.8 or above","depth":"sunlit","depthScore":38,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}