Security Advisory

CVE-2025-54838

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2025-12-09 17:18:48
Last updated 2026-01-14 09:17:55
Assigner fortinet
State PUBLISHED

Description

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.