PT-2025-41966 · Fortinet · Fortios

Published 2025-10-14 · Updated 2025-10-16 · CVE-2025-58903

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.6.0 through 7.6.3 Fortinet FortiOS versions prior to 7.4.8

Description An unchecked return value can lead to a Null Pointer Dereference, causing the http daemon to crash. This occurs when a specially crafted request is sent via the API by an authenticated user.

Recommendations Update to FortiOS version 7.4.8 or later. Update to FortiOS version 7.6.4 or later.

Fix

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

BDU:2026-05210

CVE-2025-58903

Affected Products

Fortios

References · 6

• https://fortiguard.fortinet.com/psirt/FG-IR-25-653 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58903 · Security Note
• https://bdu.fstec.ru/vul/2026-05210 · Security Note
• https://osv.dev/vulnerability/CVE-2025-58903 · Vendor Advisory
• https://twitter.com/CVEnew/status/1978932611046347193 · Twitter Post
• https://twitter.com/0dayPublishing/status/1978878418251919512 · Twitter Post