Fortinet FortiWeb Vulnerability (CVE-2025-64446) Exploited in the Wild for Full Admin Takeover

Cybersecuritynews •Guru Baran • December 16, 2025

Threat actors have been actively exploiting a critical path-traversal vulnerability in Fortinet’s FortiWeb web application firewall since early October 2025, allowing unauthenticated attackers to create rogue administrator accounts and gain full control of exposed devices. Researchers at watchTowr Labs first detailed the flaw on November 13, 2025, revealing a chain of path traversal and authentication bypass issues […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fortinet FortiWeb CVE-2025-64446 Exploited for Admin Takeover A critical path-traversal vulnerability (CVE-2025-64446) in Fortinet's FortiWeb web application firewall has been exploited by threat actors since early October 2025. This flaw allows unauthenticated attackers to create rogue administrator accounts, providing full control over affected devices. The vulnerability was detailed by researchers at watchTowr Labs on November 13, 2025. 3 sources 47

Extracted Entities

Fortinet FortiWeb Vulnerability (CVE-2025-64446) Exploited in the Wild for Full Admin Takeover

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Vulnerabilities (1)