VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 14, 2025· Updated Jan 14, 2026

CVE-2025-58903

CVE-2025-58903

Description

An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticated user to cause a Null Pointer Dereference, crashing the http daemon via a specialy crafted request.

Affected products

2
  • Fortinet/Fortiosv52 versions
    cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:fortinet:fortios:7.6.3:*:*:*:*:*:*:*range: 7.6.0
    • (no CPE)range: >=7.6.0 <=7.6.3 or <7.4.8

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

1

News mentions

0

No linked articles in our index yet.