Topic: fortinet fortiweb

Sort by: Relevance | Date
  • Active Exploit Targets Suspected FortiWeb Zero-Day
    November 15, 2025
    92%

    Active Exploit Targets Suspected FortiWeb Zero-Day

    A critical zero-day vulnerability (CVE-2025-64446) in Fortinet's FortiWeb is being actively exploited, allowing unauthenticated attackers to create unauthorized admin accounts and gain full administrative access. Fortinet silently patched the flaw in multiple versions, including 8.0.2, but delaye...

    Read More »
  • Patch Now: FortiWeb Pre-Auth RCE Exploits Released
    July 13, 2025
    90%

    Patch Now: FortiWeb Pre-Auth RCE Exploits Released

    A critical vulnerability (CVE-2025-25257, 9.8/10 severity) in Fortinet's FortiWeb WAF allows unauthenticated remote code execution via SQL injection, requiring immediate patching. Exploits leverage improper SQL sanitization in the Fabric Connector, enabling attackers to inject malicious commands ...

    Read More »

Related Topics

incident response (458) threat intelligence (248) remote code execution (207) patch management (162) security updates (142) authentication bypass (91) security advisory (66) security patch (56)