CISA Reports Active Attacks on FortiWeb WAF Vulnerability Allowing Admin Access

Gbhackers •Divya • November 18, 2025

GBHackers on Security is a top cybersecurity news platform, delivering up-to-date coverage on breaches, emerging threats, malware, vulnerabilities, and global cyber incidents.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

CISA Reports Exploitation of FortiWeb WAF Vulnerability for Admin Access CISA has reported active attacks exploiting a vulnerability in Fortinet's FortiWeb Web Application Firewall (WAF) that allows unauthorized admin access. Organizations using FortiWeb are at risk, and immediate action is advised to mitigate potential breaches. The vulnerability has been actively targeted in the wild. 2 sources 30

Extracted Entities

Platforms (1)

FortiWeb WAF