← Incidents
INCIDENT 467Exploited vulnerabilityHIGH CONFIDENCESourced
CVE-2025-25249 added to CISA KEV: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
<p>CISA has added four new vulnerabilities to its <a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Known Exploited Vulnerabilities (KEV) Catalog</a>, based on evidence of active exploitation. </p> <ul> <li><a href="https://www.cve.org/CVERecord?id=CVE-2025-25249" target="_blank">CVE-2025-25249</a> Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability</li> <li><a href="https://www.cve.org/CVERecord?id=CVE-2026-19490" target="_blank">CVE-2026-19490</a> Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability</li> <li><a hr…
Last evidence update
09 SEP 2026 · 12:00 UTC
Source count
3
Status
high confidence
GovernmentCVE-2025-25249CVE-2026-19490CVE-2026-87491CVE-2026-20079
Observation history
How this record has evolved as evidence accumulated.
10 SEP · 05:22 UTC
Initial report
10 SEP · 05:22 UTC
Second independent source
10 SEP · 05:22 UTC
Confidence upgraded
10 SEP · 05:22 UTC
Status changed
10 SEP · 05:22 UTC
Second independent source
10 SEP · 05:22 UTC
Summary updated from new evidence
10 SEP · 05:22 UTC
Related CVE identified (CVE-2026-20079)
Evidence
Related incidents
INCIDENT 468 · CVE-2026-20079 added to CISA KEV: Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel VulnerabilityINCIDENT 442 · CVE-2026-85046 added to CISA KEV: Google Chromium V8 Type Confusion VulnerabilityINCIDENT 466 · CVE-2026-19490 added to CISA KEV: Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability