Back Csa.Sg

Active Exploitation of Vulnerability in FortiWeb

Csa.Sg • November 21, 2025

Fortinet has released security updates to address a vulnerability in their FortiWeb products.

Fortinet has released security updates to address a vulnerability (CVE-2025-58034) in their FortiWeb products.

Successful exploitation of the OS Command Injection vulnerability could allow an authenticated attacker to execute arbitrary code via crafted HTTP requests or command-line interface (CLI) commands.

This vulnerability is reportedly being exploited in the wild.

The vulnerability affects the following versions:

FortiWeb 8.0.0 through 8.0.1

FortiWeb 7.6.0 through 7.6.5

FortiWeb 7.4.0 through 7.4.10

FortiWeb 7.2.0 through 7.2.11

FortiWeb 7.0.0 through 7.0.11

Users and administrators of affected product versions are strongly advised to update to the latest versions immediately.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be exploited in the wild, prompting urgent attention from cybersecurity teams. 100 sources 80

Extracted Entities

Active Exploitation of Vulnerability in FortiWeb

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Vulnerabilities (2)