medium6.8
CVE-2025-54838
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device v…
Impact
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Fortiportal | from 7.4.0 through 7.4.5 |