CVE-2025-58413: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

High severity · published Nov 18, 2025

CVE-2025-58413

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

7.5

CVSS

0.4%

EPSS

On KEV

Description

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Adjacent

Complexity

High

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.4% · higher than 29% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

FortiOS · Fortinet

7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16; 6.2.0 through 6.2.17; +1 more · source: vendor, NVD

FortiSASE · Fortinet

25.3.b · source: vendor, NVD

RUGGEDCOM APE1808 · Siemens

0 · source: CISA

Affected product

FortiOS

Fortinet

All FortiOS CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-58413

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-58413

Vendor Advisory

https://fortiguard.fortinet.com/psirt/FG-IR-25-632

cert-portal.siemens.com

https://cert-portal.siemens.com/productcert/html/ssa-864900.html