Security Advisory
CVE-2025-54838
6.8
MEDIUM
Vulnerability Description
An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.
Published Date
December 9, 2025
Official Source
NIST NVD Advisory