Product of Fortinet
FortiWeb
As of , 3 Fortinet FortiWeb vulnerabilities are on CISA's list of exploited vulnerabilities; 0 were added in 2026. Patch first: CVE-2025-58034.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2025-58034OS Command Injection | Fortinet FortiWeb | Patch this weekMetasploit module; EPSS 0.56 | 0.56 | ||
| 2 | CVE-2025-64446Path Traversal | Fortinet FortiWeb | Patch this weekMetasploit module; EPSS 0.92 | 0.92 | ||
| 3 | CVE-2025-25257SQL Injection | Fortinet FortiWeb | Patch this weekEPSS 0.99 | 0.99 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2025 | 3 |
| 2026 | none |