{"uuid": "0e314286-4907-4872-af5b-07ff75eb685a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-25249", "type": "exploited", "source": "https://t.me/pphm_HackerNews/3088", "content": "\ud83d\udd34 Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks\n\nThreat actors have been exploiting an unauthenticated remote code execution (RCE) vulnerability in Fortinet products to deploy a Node.js RAT, SOCRadar reports.\n\nTracked as CVE-2025-25249 (CVSS score of 7.4) and described as a heap-based buffer overflow issue, the high-severity bug was patched in January in FortiOS and FortiSwitchManager.\n\nThe flaw \u201cmay allow a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests,\u201d Fortinet noted in its advisory.", "creation_timestamp": "2026-09-11T00:00:36.194204Z"}