{"id":"CVE-2025-64155","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-64155","generatedAt":"2026-10-28T07:25:03.635Z","title":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through…","description":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via  crafted TCP requests.","published":"2026-01-13T17:15:58.000Z","lastModified":"2026-06-17T09:53:56.000Z","status":"Modified","sourceIdentifier":"psirt@fortinet.com","cvss":{"version":"3.1","score":9.8,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cwe":["CWE-78"],"affected":["fortinet/fortisiem"],"epss":{"score":0.43599,"percentile":0.98734,"date":"2026-10-27","history":[{"date":"2026-09-24","score":0.42814,"percentile":0.9867},{"date":"2026-10-25","score":0.43599,"percentile":0.98732}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"urgent","text":"EPSS puts the probability of exploitation in the next 30 days at 43.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window."},"changes":[],"references":[{"url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-772","tags":["Vendor Advisory"],"source":"psirt@fortinet.com"},{"url":"https://github.com/horizon3ai/CVE-2025-64155","tags":["Exploit","Third Party Advisory"],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"},{"url":"https://github.com/purehate/CVE-2025-64155-hunter","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-64155","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}