CVE-2025-54838

Fortinet / FortiPortal PUBLISHED

Description (CNA)

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiPortal	affected 7.4.0 through 7.4.5

CWE

CWE-863

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-032

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.