983,992 FortiGate Instances Found as CVE-2025-25249 Hits CISA KEV

A ZoomEye fingerprint query for app="FortiGate" returned 983,992 matching assets on 23 September 2026. CVE-2025-25249, a pre-authentication heap buffer overflow in FortiOS, FortiSwitchManager and FortiSASE, was added to CISA's Known Exploited Vulnerabilities catalog on 9 September 2026.

• ZoomEye query app="FortiGate" returned 983,992 assets on 23 September 2026
• CVE-2025-25249 is a pre-auth heap buffer overflow (CWE-122, CWE-787)
• CISA added it to KEV on 9 September 2026 with a 12 September due date
• The fingerprint does not reveal firmware versions or device placement