Fortinet FortiWeb

5 known vulnerabilities in Fortinet FortiWeb, 4 critical, 4 actively exploited, with patch priority, exploit likelihood and the news covering them.

Recently exploited

  • CVE-2026-24858 CVSS 9.8 critical · actively exploited Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2025-58034 CVSS 7.2 high · actively exploited Fortinet FortiWeb OS Command Injection Vulnerability
  • CVE-2025-64446 CVSS 9.8 critical · actively exploited Fortinet FortiWeb Path Traversal Vulnerability
  • CVE-2025-25257 CVSS 9.8 critical · actively exploited Fortinet FortiWeb SQL Injection Vulnerability

Latest vulnerabilities

  • CVE-2026-24858 CVSS 9.8 critical · actively exploited Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
  • CVE-2025-59719 CVSS 9.8 critical An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0…
  • CVE-2025-58034 CVSS 7.2 high · actively exploited Fortinet FortiWeb OS Command Injection Vulnerability
  • CVE-2025-64446 CVSS 9.8 critical · actively exploited Fortinet FortiWeb Path Traversal Vulnerability
  • CVE-2025-25257 CVSS 9.8 critical · actively exploited Fortinet FortiWeb SQL Injection Vulnerability