Fortinet unearths second FortiWeb firewall vulnerability in as many weeks

Fortinet has uncovered a bug in its FortiWeb firewall offering, the second issue to be reported with the product in a month.

First reported by The Register , the vulnerability ( CVE-2025-58034 ) could allow attackers to execute code on the web application firewall via CLI commands or crafted HTTP requests. An issue identified as an OS command injection vulnerability could provide an authenticated attacker with full reign to offer unauthorized commands.

The security vendor said it has “observed” the exploit being used, with a fix issued via software update.

It’s the second such issue with FortiWeb in recent weeks, after another vulnerability ( CVE-2025-64446 ) provided attackers with a potential path to execute administrative commands on the web application firewall.

This latest vulnerability was assigned a CVE far faster than the prior issue – which saw Fortinet only acknowledging the issue around a whole month after the team at WatchTowr brought it to public attention .

That prior problem was, however, picked by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which added it to its Known Exploited Vulnerabilities (KEV) catalog.

Despite the multitude of FortiWeb vulnerabilities, the vendor was recognized as a leader in Gartner's recent Magic Quadrant for hybrid mesh firewalls – a list that saw several big-name vendors, like Cisco and Hewlett Packard Enterprise (HPE) left to languish further down the rankings.