CVE-2025-58034

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

November 18, 2025

Last Seen

January 2, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation79.5

A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...

Fortinet Discovers Zero-Day Exploited in Cyber Attacks67.6

Fortinet has identified a zero-day vulnerability, CVE-2025-58034, being actively exploited in cyber attacks. This flaw affects FortiWeb and is part of a broader trend where Fortinet vulnerabilities are frequently targeted in cyber-espionage and ransomware incidents, including attacks attributed to C...

Fortinet Discovers New Zero-Day Vulnerability Under Exploitation56.1

Fortinet has identified a new zero-day vulnerability, CVE-2025-58034, that is currently being exploited in attacks. This flaw affects FortiWeb and is part of a broader trend of Fortinet vulnerabilities being targeted in cyber-espionage and ransomware incidents, including those linked to Chinese acto...

CISA Warns of Active Exploitation of Oracle Identity Manager Vulnerability CVE-2025-6175750.7

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a critical vulnerability in Oracle Identity Manager, tracked as CVE-2025-61757, is being actively exploited in the wild. This flaw allows unauthenticated remote code execution and has a CVSS score of 9.8, indicating...