CyberSec.Space Logo
Back to CVE Browser

CVE-2025-54973

MEDIUM
5.3
CVSS Severity Score
EPSS Score0.0000%
EPSS Percentile0.00th
Published2025-10-14
Last Modified2026-06-17
Data SourcesNVD

Vulnerability Description

A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability [CWE-362] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 and before 7.0.13 allows an attacker to attempt to win a race condition to bypass the FortiCloud SSO authorization via crafted FortiCloud SSO requests.

Affected Platforms (CPE)

📦
Fortinet

Fortianalyzer

>= 7.0.9 and < 7.0.14>= 7.2.0 and < 7.2.11>= 7.4.0 and < 7.4.7>= 7.6.0 and < 7.6.3

References & Advisories

🔗 https://fortiguard.fortinet.com/psirt/FG-IR-25-198

Related Vulnerabilities

CVE-2025-686487.2

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro...

CVE-2026-248589.8

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 ...

CVE-2024-405936.0

A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnaly...

CVE-2025-538456.5

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows a...