Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

As cited

Copy frozen at 2026-09-10 09:04 UTC (site build).

vulnerabilities

Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks

CVE-2025-25249, an unauthenticated remote code execution flaw in Fortinet products, was patched in January 2026 but continues to be exploited in the wild. Attackers are leveraging the vulnerability as part of PivotC2 remote access trojan (RAT) campaigns.

Why it matters: Fortinet customers and administrators managing exposed instances face active exploitation of this flaw; patching immediately is critical to prevent RAT deployment and compromise.

Source published

2026-09-10 06:33 UTC

First seen by Cybersecurity Tracker

2026-09-10 08:43 UTC