Crn Fortinet FortiWeb CVE-2025-64446 Exploited for Admin Takeover
Article Content
Browse articles 
A critical path-traversal vulnerability (CVE-2025-64446) in Fortinet's FortiWeb web application firewall has been exploited by threat actors since early October 2025. This flaw allows unauthenticated attackers to create rogue administrator accounts, providing full control over affected devices. The vulnerability was detailed by researchers at watchTowr Labs on November 13, 2025.
Ask AI about this cluster
Answers cite the sources they use
Updated 221d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track WatchTowr Labs and CVE-2025-59718 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
TAG-193 Targets Central Asian Governments in Espionage Campaign TAG-193 has been linked to a series of espionage operations targeting government institutions in Russia, Tajikistan, Belarus, Armenia, and Uzbekistan from early 2025 to May 2026. The group utilized spearphishing tactics, including compromised accounts and malicious documents, to gain access to sensitive information… 
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…