CVE-2025-58034

KEV

Updated Feb 26, 2026 · PUBLISHED

Description

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Full record on cve.org →

Affected packages

Package	Vendor / Product	Version range	Status
FortiWeb	Fortinet / FortiWeb	>= 7.0.2, <= 7.0.11	affected
FortiWeb	Fortinet / FortiWeb	>= 7.2.0, <= 7.2.11	affected
FortiWeb	Fortinet / FortiWeb	>= 7.4.0, <= 7.4.8	affected
FortiWeb	Fortinet / FortiWeb	>= 7.6.0, <= 7.6.4	affected