CISA Adds One Known Exploited Vulnerability to Catalog

Cisa •CISA • November 18, 2025

Official websites use .gov A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS A lock ( ) or https:// means you’ve safely connected to the .gov website. sensitive information only on official, secure websites.

Free Cyber Services Secure by design Shields Up Report A Cyber Issue

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows unauthenticated attackers to execute administrative commands, while the second enables authenticated attackers to perform OS command injection. CISA has issued urgent advisories for affected organizations to patch their systems promptly. 74 sources 33

CISA Adds One Known Exploited Vulnerability to Catalog

The full story

Extracted Entities

Campaigns (1)

Companies (1)