Metasploit Adds Exploit for FortiWeb 0-Day Vulnerabilities
Article Content
Browse articles 
Metasploit has released a new exploit module targeting recently disclosed zero-day vulnerabilities in Fortinet's FortiWeb Web Application Firewall (WAF). This update allows cybersecurity professionals to test the security of their systems against these vulnerabilities. The specific details of the vulnerabilities and their potential impact have not been disclosed in the articles.
Ask AI about this cluster
Answers cite the sources they use
Updated 183d ago How this analysis works
More articles in this cluster (3)
Following this threat?
Track Fortinet in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Multiple Critical CVEs Exploited in Cybersecurity Attacks A series of vulnerabilities, including CVE-2025-49144, CVE-2025-31702, and CVE-2026-46333, have been identified, affecting systems like Notepad++ and FortiWeb devices. These vulnerabilities allow for local privilege escalation, SQL injection, and remote code execution. Attackers exploit these flaws through various… 
Fortinet FortiWeb Vulnerabilities Enable Potential Takeover Fortinet has disclosed critical vulnerabilities in its FortiWeb web application firewall, allowing attackers to execute arbitrary code and potentially take over affected systems. The vulnerabilities, identified as CVE-2026-1234 and CVE-2026-1235, affect multiple versions of FortiWeb. Attackers can exploit these flaws…