CVE-2025-64155

critical · 9.8

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.

9.8

CVSS

45.4%

EPSS (exploit prob.)

99th

EPSS percentile

2026-01-13

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-78

Affected products

Vendor	Product	Affected versions
fortinet	fortisiem	>= 6.7.0, < 7.1.9
fortinet	fortisiem	>= 7.2.0, < 7.2.7
fortinet	fortisiem	>= 7.3.0, < 7.3.5
fortinet	fortisiem	7.4.0

Check a specific version with /api/v1/cve/match.

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-772
https://github.com/horizon3ai/CVE-2025-64155
https://github.com/purehate/CVE-2025-64155-hunter

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2025-64155