Back Feeds2.Feedburner

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034)

Feeds2.Feedburner •Zeljka Zorz • November 19, 2025

Attackers are actively exploiting another FortiWeb vulnerability (CVE-2025-58034) that Fortinet fixed without making its existence public at the time. CVE-2025-58034 CVE-2025-58034 is an OS Command Injection flaw caused by improper neutralization of special elements. It allows authenticated attackers to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. “Fortinet has observed this to be exploited in the wild,” the company’s Product Security Incident Response Team confirmed in a security … More →

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be exploited in the wild, prompting urgent attention from cybersecurity teams. 100 sources 80

Extracted Entities

Stealth-patched FortiWeb vulnerability under active exploitation (CVE-2025-58034)

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

Vulnerabilities (2)