onyx

onyx --cves cve-2025-58413

CVE-2025-58413

score
<0.1
cvss
7.5
epss
0.4%
published
2025-11-18
kev added
—
first seen

Fortinet FortiOS 7.6.0 through 7.6.3, 7.4.0 through 7.4.8, 7.2, 7.0, 6.4, 6.2, 6.0 and FortiSASE 25.3.b contain a stack-based buffer overflow caused by improper handling of specially crafted packets, letting attackers execute unauthorized code or commands remotely, exploit requires crafted packets.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2025-11-18 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.3%2026-09-23: epss 0.3%2026-09-24: epss 0.3%2026-09-25: epss 0.3%2026-09-26: epss 0.3%2026-09-27: epss 0.3%2026-09-29: epss 0.3%2026-09-30: epss 0.3%2026-10-01: epss 0.3%2026-10-02: epss 0.3%2026-10-03: epss 0.3%2026-10-04: epss 0.3%2026-10-05: epss 0.3%2026-10-06: epss 0.3%2026-10-07: epss 0.3%2026-10-08: epss 0.3%2026-10-09: epss 0.3%2026-10-10: epss 0.3%2026-10-11: epss 0.3%2026-10-12: epss 0.3%2026-10-13: epss 0.3%2026-10-14: epss 0.3%2026-10-15: epss 0.3%2026-10-16: epss 0.3%2026-10-18: epss 0.3%2026-10-19: epss 0.4%2026-10-20: epss 0.4%2026-10-21: epss 0.4%0.4%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-121 CWE-787

References 2