CVE-2025-25256 - Vulnerability Details

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• Critical FortiSIEM Vulnerability CVE-2025-64155 Under Active Exploitation

  A critical vulnerability (CVE-2025-64155) in Fortinet's FortiSIEM platform allows unauthenticated remote code execution via crafted TCP requests. This OS command injection flaw affects the phMonitor service, which is…

  3 articles · Updated January 15, 2026
• Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities

  Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities,…

  3 articles · Updated December 10, 2025
• Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

  Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…

  74 articles · Updated November 28, 2025

Recent Intelligence Reports

• Critical FortiSIEM Vulnerability(CVE-2025-64155) Enable Full RCE and Root Compromise — Cybersecuritynews · January 14, 2026
• Fortinet warns of critical FortiCloud SSO login auth bypass flaws — Bleepingcomputer · December 9, 2025
• CISA gives govt agencies 7 days to patch new Fortinet flaw — Bleepingcomputer · November 19, 2025
• Fortinet warns of new FortiWeb zero — Bleepingcomputer · November 18, 2025
• Fortinet confirms silent patch for FortiWeb zero — Bleepingcomputer · November 14, 2025

Related Entities