CVE-2025-58413

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets
References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:feature:*:*:*
cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:mature:*:*:*

History

21 Nov 2025, 09:15

Type Values Removed Values Added
Summary (en) A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets (en) A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

20 Nov 2025, 14:36

Type Values Removed Values Added
References () https://fortiguard.fortinet.com/psirt/FG-IR-25-632 - () https://fortiguard.fortinet.com/psirt/FG-IR-25-632 - Vendor Advisory
First Time Fortinet
Fortinet fortios
Fortinet fortisase
CPE cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:mature:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:feature:*:*:*
CWE CWE-787

18 Nov 2025, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-18 17:16

Updated : 2025-11-21 09:15


NVD link : CVE-2025-58413

Mitre link : CVE-2025-58413

CVE.ORG link : CVE-2025-58413


JSON object : View

Products Affected

fortinet

  • fortisase
  • fortios
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write