CVE-2025-58413

A

stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

References
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:feature:*:*:*
cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:mature:*:*:*

History

21 Nov 2025, 09:15

Type Values Removed Values Added
Summary (en) A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets (en) A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

20 Nov 2025, 14:36

Type Values Removed Values Added
CWE CWE-787
First Time Fortinet fortios
Fortinet
Fortinet fortisase
CPE cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:mature:*:*:*
cpe:2.3:a:fortinet:fortisase:25.3.89:*:*:*:feature:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
References () https://fortiguard.fortinet.com/psirt/FG-IR-25-632 - () https://fortiguard.fortinet.com/psirt/FG-IR-25-632 - Vendor Advisory

18 Nov 2025, 17:16

Type Values Removed Values Added
New CVE

Information

Published : 2025-11-18 17:16

Updated : 2025-11-21 09:15


NVD link : CVE-2025-58413

Mitre link : CVE-2025-58413

CVE.ORG link : CVE-2025-58413


JSON object : View

Products Affected
CWE
CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write