Incorrect Authorization in FortiPortal Affects Fortinet Devices

CVE-2025-54838

What is CVE-2025-54838?

An Incorrect Authorization vulnerability exists in FortiPortal versions 7.4.0 to 7.4.5, which could allow an authenticated attacker to perform unauthorized actions on a shared FortiGate device through specially crafted HTTP requests. This can lead to device reboots and potentially disrupt services. It is essential for users to review their configurations and apply recommended patches to mitigate this vulnerability. For detailed information and remediation steps, visit the official Fortinet advisory.

References