CVE-2025-58413 MEDIUM

CVE-2025-58413

Vendor Fortinet
Product FortiOS
Weakness CWE-121
Published November 18, 2025
Last update June 9, 2026

CVSS base score

6.9/10
Attack vector Adjacent
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C

What the vulnerability does

01Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

Key dates

02Disclosure timeline

November 18, 2025 CVE published
June 9, 2026 Record updated