CVE-2025-46776 Memory corruption in FortiExtender

What is CVE-2025-46776?

CVE-2025-46776 is a medium-severity memory corruption vulnerability in Fortinet FortiExtender, published on 18 Nov 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to execute arbitrary code or commands via crafted CLI commands.

Weakness: CWE-120

Which versions are affected by CVE-2025-46776?

It affects 1 product.

Products include Fortinet Fortiextender Firmware.

How do I fix CVE-2025-46776?

No fix has been published for CVE-2025-46776 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2025-46776 being exploited?

There is no known exploitation of CVE-2025-46776 in the wild and no public exploit code.

Other vulnerabilities in Fortinet FortiExtender

• CVE-2024-23663 Privilege escalation in FortiExtender High 8.1
• CVE-2021-41016 Command injection in n/a High 7.8
• CVE-2022-23447 Path traversal in FortiExtender High 7.3
• CVE-2022-27489 Command injection in FortiExtender High 7.0
• CVE-2025-64153 Command injection in FortiExtender Medium 6.7

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xhvc-jjj4-9gq2.