# CVE-2025-54821

## Summary

- **CVE ID:** CVE-2025-54821
- **Severity:** LOW
- **CVSS Score:** 1.8 (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:R)
- **CWE:** CWE-269
- **Published:** Nov 18, 2025
- **Last Modified:** Aug 11, 2026

## Description

An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow an authenticated administrator to bypass the trusted host policy via crafted CLI command.

## Affected Products

- Fortinet — FortiProxy (7.6.0)
- Fortinet — FortiProxy (7.4.0)
- Fortinet — FortiProxy (7.2.0)
- Fortinet — FortiProxy (7.0.0)
- Fortinet — FortiPAM (1.6.0)
- Fortinet — FortiPAM (1.5.0)
- Fortinet — FortiPAM (1.4.0)
- Fortinet — FortiPAM (1.3.0)
- Fortinet — FortiPAM (1.2.0)
- Fortinet — FortiPAM (1.1.0)
- Fortinet — FortiPAM (1.0.0)
- Fortinet — FortiOS (7.6.0)
- Fortinet — FortiOS (7.4.0)
- Fortinet — FortiOS (7.2.0)
- Fortinet — FortiOS (7.0.0)
- Fortinet — FortiOS (6.4.0)
- Fortinet — FortiSASE (25.2.91)

## References

- [CNA](https://fortiguard.fortinet.com/psirt/FG-IR-25-545)
- [siemens-SADP](https://cert-portal.siemens.com/productcert/html/ssa-864900.html)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.15%
- **EPSS Percentile:** 4.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._