CISA Adds Two Known Exploited Vulnerabilities to Catalog

Cisa •CISA • November 4, 2025

Official websites use .gov A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS A lock ( ) or https:// means you’ve safely connected to the .gov website. sensitive information only on official, secure websites.

NOTICE : Due to the lapse in federal funding, this website will not be actively managed.

Free Cyber Services Cybersecurity Awareness Month Secure by design Shields Up Report A Cyber Issue

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows unauthenticated attackers to execute administrative commands, while the second enables authenticated attackers to perform OS command injection. CISA has issued urgent advisories for affected organizations to patch their systems promptly. 74 sources 33

CISA Adds Two Known Exploited Vulnerabilities to Catalog

The full story

Extracted Entities

Campaigns (2)

Countries (1)