CISA and FortiGuard Warn of New FortiWeb Vulnerability Exploit - RS Web Solutions (RSWEBSOLS)

Back Rswebsols

CISA and FortiGuard Warn of New FortiWeb Vulnerability Exploit - RS Web Solutions (RSWEBSOLS)

Rswebsols • November 20, 2025

Share: View original

CISA and FortiGuard Labs warn of a new exploited vulnerability in FortiWeb, risking security breaches. Learn how to protect your systems now.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows unauthenticated attackers to execute administrative commands, while the second enables authenticated attackers to perform OS command injection. CISA has issued urgent advisories for affected organizations to patch their systems promptly. 74 sources 33

Extracted Entities

Attack Types (2)

Data Breach Zero-day Exploit

Companies (2)

CISA FortiGuard Labs

Vulnerabilities (1)