CVE-2025-64446 - Vulnerability Details

Related Threat Clusters

• FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

  A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

  100 articles · Updated November 15, 2025
• ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits

  A coordinated supply chain attack has been identified, targeting vulnerability researchers and penetration testers through malicious proof-of-concept (PoC) repositories on GitHub. The malware, named ChocoPoC, is a…

  10 articles · Updated July 1, 2026
• Multiple Vulnerabilities Discovered in Cybersecurity Software

  CVE-2025-64756 identifies a command injection vulnerability in the glob CLI affecting versions 10.3.7 to 11.0.3. CVE-2025-64446 reveals a relative path traversal vulnerability in Fortinet FortiWeb versions 8.0.0 to…

  19 articles · Updated November 18, 2025
• Over 10,000 Fortinet Firewalls Vulnerable to 2FA Bypass Exploits

  More than 10,000 Fortinet firewalls remain exposed to a critical two-factor authentication bypass vulnerability (CVE-2020-12812) that has been actively exploited. This flaw, first disclosed in July 2020, continues to…

  6 articles · Updated January 5, 2026
• Fortinet FortiWeb CVE-2025-64446 Exploited for Admin Takeover

  A critical path-traversal vulnerability (CVE-2025-64446) in Fortinet's FortiWeb web application firewall has been exploited by threat actors since early October 2025. This flaw allows unauthenticated attackers to create…

  3 articles · Updated December 16, 2025
• Fortinet Addresses Critical SSO Authentication Bypass Vulnerabilities

  Fortinet has released security updates for critical vulnerabilities in FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager that could allow attackers to bypass FortiCloud SSO authentication. The vulnerabilities,…

  3 articles · Updated December 10, 2025
• Multiple Vulnerabilities Discovered in Cybersecurity Software

  Two significant vulnerabilities have been identified affecting various software versions. CVE-2025-64756 involves a command injection vulnerability in the glob CLI from versions 10.3.7 to 11.0.3. CVE-2025-64446 is a…

  3 articles · Updated November 18, 2025
• Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

  Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…

  74 articles · Updated November 28, 2025
• Rogue MCP Servers Exploit Vulnerability in Cursor Code Editor

  Security researchers have identified a vulnerability in Cursor, an AI-powered code editor, that allows rogue Model Context Protocol (MCP) servers to inject malicious code into its internal browser. This exploit can…

  2 articles · Updated November 17, 2025
• Over 25,000 Fortinet Devices Vulnerable to Attacks via FortiCloud SSO

  More than 25,000 Fortinet devices with FortiCloud SSO enabled are exposed to remote attacks due to a critical authentication bypass vulnerability tracked as CVE-2025-59718. The U.S. has the highest number of affected…

  2 articles · Updated December 22, 2025

Recent Intelligence Reports

• Dont Eat The Chocopocs How Vulnerability Researchers Were Repeatedly Targeted By Trojanised Exploits — www.sekoia.com · July 2, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026
• New ChocoPoC malware targets researchers via trojanized PoC exploits — Bleepingcomputer · July 1, 2026
• ChocoPoc malware delivered via trojanized exploits on GitHub — Bleepingcomputer · July 1, 2026
• Over 10K Fortinet firewalls exposed to actively exploited 2FA bypass — Bleepingcomputer · January 2, 2026
• Over 25,000 FortiCloud SSO devices exposed to remote attacks — Bleepingcomputer · December 19, 2025
• Fortinet FortiWeb Vulnerability (CVE-2025-64446) Exploited in the Wild for Full Admin Takeover — Cybersecuritynews · December 16, 2025
• Fortinet warns of critical FortiCloud SSO login auth bypass flaws — Bleepingcomputer · December 9, 2025

Related Entities