AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-47855

CRITICAL · CVSS 9.8 EPSS 0.79%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-01-13 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Fortinet. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-47855
Severity
CRITICAL
CVSS
9.8
EPSS
0.79%
Fortinet

Original NVD Description

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.