Back Thecyberwire

CISA warns of actively exploited FortiWeb flaw.

Thecyberwire • November 22, 2025

Cloudflare outage caused by enlarged configuration file. US and allies sanction bulletproof hosting providers. Google issues patch for Chrome zero - day

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows unauthenticated attackers to execute administrative commands, while the second enables authenticated attackers to perform OS command injection. CISA has issued urgent advisories for affected organizations to patch their systems promptly. 74 sources 33

CISA warns of actively exploited FortiWeb flaw.

The full story

Extracted Entities

Tools (1)

Vulnerabilities (1)