Skip to content
FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

First seen 17 Nov 2025, 15:14 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be exploited in the wild, prompting urgent attention from cybersecurity teams.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 217d ago How this analysis works

More articles in this cluster (100)

Following this threat?

Track Volt Typhoon, Coathanger and Amazon in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed