Fortinet FortiWeb — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
November 15, 2025
Last Seen
July 25, 2026

Related Threat Clusters

  • FortiWeb WAF Vulnerability Enables Full Admin Control Exploitation

    A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of…

    100 articles · Updated November 15, 2025
  • EvilTokens Phishing Kit Exploits Microsoft 365 with AI-Driven BEC Tactics

    In March 2026, the EvilTokens phishing kit emerged as a significant threat, allowing cybercriminals to bypass multi-factor authentication (MFA) and compromise Microsoft 365 accounts. This Phishing-as-a-Service (PhaaS)…

    44 articles · Updated July 1, 2026
  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1922 articles · Updated February 12, 2026
  • Critical Vulnerabilities in Fortinet FortiWeb Actively Exploited

    Fortinet's FortiWeb web application firewall has been compromised by two critical vulnerabilities, CVE-2025-64446 and CVE-2025-58034, both of which are under active exploitation. The first vulnerability allows…

    74 articles · Updated November 28, 2025

Recent Intelligence Reports

  • LevelBlue found that phishing started 65% of intrusions — www.levelblue.com · July 25, 2026
  • Researchers warn command injection flaw in Fortinet FortiWeb is under exploitation — Cybersecuritydive · November 20, 2025
  • U.S. CISA adds a new Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · November 19, 2025
  • CISA Alerts on Fortinet FortiWeb Vulnerability Exploited in Real — Gbhackers · November 19, 2025
  • Critical vulnerability in Fortinet FortiWeb is under active exploitation — Cybersecuritydive · November 17, 2025
  • Critical vulnerability in Fortinet FortiWeb is under exploitation — Cybersecuritydive · November 17, 2025
  • U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog — Securityaffairs.Co · November 15, 2025

CVSS v3.1 Breakdown