Skip to content
Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

First seen 1 Dec 2025, 15:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows unauthenticated attackers to execute administrative commands, while the second enables authenticated attackers to perform OS command injection. CISA has issued urgent advisories for affected organizations to patch their systems promptly.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 218d ago How this analysis works

More articles in this cluster (74)

Following this threat?

Track Volt Typhoon, Coathanger and CISA in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed