Fortinet Issues Fixes as FortiWeb Takeover Flaw Sees Active Attacks

🗓️ 19 Nov 2025 15:29:28Reported by Deeba AhmedType

Fortinet flags FortiWeb vulnerabilities including a critical unauthenticated bypass under attack; check logs for rogue admins and upgrade now.

Reporter	Title	Published	Views	Family All 43
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	4 Mar 202608:31	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	26 Mar 202611:29	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	21 Nov 202500:37	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	24 Jun 202612:41	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	18 Nov 202510:25	–	githubexploit
GithubExploit	Exploit for CVE-2025-58034	19 Nov 202509:52	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	2 Mar 202614:36	–	githubexploit
BDU FSTEC	The vulnerabilities of the cgiauth() and cgiprocess() functions in FortiWeb’s web application firewall allow attackers to enhance their privileges.	13 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-64446	14 Nov 202515:42	–	circl
CISA KEV Catalog	Fortinet FortiWeb Path Traversal Vulnerability	14 Nov 202500:00	–	cisa_kev

19 Nov 2025 15:29Current

7.3High risk

Vulners AI Score7.3

CVSS 3.19.8

EPSS0.89177

SSVC