CVE-2025-64446: Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild

🗓️ 13 Nov 2025 21:36:27Reported by Rapid7Type

rapid7blog🔗 www.rapid7.com👁 18 Views

Critical FortiWeb vulnerability exploited in the wild grants admin access on pre-8.0.2; remediate.

Reporter	Title	Published	Views	Family All 59
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	4 Mar 202608:31	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	26 Mar 202611:29	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	21 Nov 202500:37	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	24 Jun 202612:41	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	18 Nov 202510:25	–	githubexploit
GithubExploit	Exploit for CVE-2025-58034	19 Nov 202509:52	–	githubexploit
GithubExploit	Exploit for Relative Path Traversal in Fortinet Fortiweb	30 Jul 202618:14	–	githubexploit
GithubExploit	Exploit for OS Command Injection in Fortinet Fortiweb	2 Mar 202614:36	–	githubexploit
BDU FSTEC	The vulnerabilities of the cgiauth() and cgiprocess() functions in FortiWeb’s web application firewall allow attackers to enhance their privileges.	13 Nov 202500:00	–	bdu_fstec
Circl	CVE-2025-64446	14 Nov 202515:42	–	circl

13 Nov 2025 21:36Current

7.4High risk

Vulners AI Score7.4

CVSS 3.19.8

EPSS0.91838

SSVC

fortiweb vulnerability fortiweb manager pre 8.0.2 admin access wild exploitation