CVE-2025-58413

Published: Nov 18, 2025Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: psirt@fortinet.com (Secondary)

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

Affected (4)

Products: Fortinet: Fortios, Fortisase

2 products

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortios	From 6.0.0 to 7.4.9
Fortinet Fortios	From 7.6.0 to 7.6.4

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Fortinet Fortisase	Version 25.3.89
Fortinet Fortisase	Version 25.3.89

Related CWEs

Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

References (2)

https://fortiguard.fortinet.com/psirt/FG-IR-25-632

Source: psirt@fortinet.com

Vendor Advisory

https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.