Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
CVE-2025-57740
Fortinet FortiPAM — An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and bel…
AV AC PR UI S C I A CVSS EPSS %ile KEV
N L L N U H H H 8.8 .0068 51.5 —
AFFECTED
Product Versions Fixed
FortiPAM 1.5.0 – —
FortiProxy 7.6.0 – —
FortiOS 7.6.0 – —
TIMELINE
Aug 19 Reserved by fortinet
Oct 14 Published (CNA: fortinet)
Oct 18 RESCORED — CVE-2025-57740 (Fortinet FortiPAM). CVSS 6.7 → 8.8 (NVD).
Description
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.
Lifecycle
Complete event history — 3 events, chronological
| Date | Event | Detail |
|---|
| August 19, 2025 | Reserved | Reserved by fortinet |
| October 14, 2025 | Published | Published (CNA: fortinet) |
| October 18, 2026 | RESCORED | RESCORED — CVE-2025-57740 (Fortinet FortiPAM). CVSS 6.7 → 8.8 (NVD). |
Affected
Affected products and packages — 3 rows
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|
| Fortinet | FortiPAM | — | 1.5.0 | — |
| Fortinet | FortiProxy | — | 7.6.0 | — |
| Fortinet | FortiOS | — | 7.6.0 | — |
About this page
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-57740 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
