Critical Fortinet FortiWeb WAF Bug Exploited in the Wild

Darkreading •Alexander Culafi • November 17, 2025

Share: View original

The vulnerability could allow an unauthenticated attacker to remotely execute administrative commands.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Fortinet FortiWeb WAF Vulnerability Exploited by Attackers A critical vulnerability in Fortinet's FortiWeb Web Application Firewall (WAF) has been exploited in the wild, allowing unauthenticated attackers to remotely execute administrative commands. Organizations using FortiWeb are at risk, and immediate action is advised to mitigate potential attacks. 2 sources 48

Extracted Entities

Platforms (1)

Fortinet FortiWeb WAF