EUVD-2025-208485

An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow a remote unauthenticated attacker to bypass hostname restrictions via a specially crafted request...

CVE-2025-25255

creationtimestamp| type| source ---|---|--- 2025-11-19 07:52:08+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/60161 2025-11-19 12:50:02+00:00| published-proof-of-concept| https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass/blob/main/watchTowr-vs-Fortiweb-AuthBypass.p...

Exploit for Improperly Implemented Security Check for Standard in Fortinet Fortiproxy

watchTowr-vs-Fortiweb-AuthBypass Detection Artifact Generator...