CVE-2025-58413: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 throu

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 al

Status

Published

2025-11-18

Updated

2026-10-15

Assigning organization

fortinet

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiOS

Default version status: unaffected

7.6.0 to ≤ 7.6.3affected
7.4.0 to ≤ 7.4.8affected
7.2.0 to ≤ 7.2.12affected
7.0.0 to ≤ 7.0.18affected
6.4.0 to ≤ 6.4.16affected
6.2.0 to ≤ 6.2.17affected
6.0.0 to ≤ 6.0.18affected

Fortinet FortiSASE