Firetruck

CVE-2025-64446

KEV
Updated Feb 26, 2026 · PUBLISHED
View KEV entry →

Description

Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
FortiWebFortinet / FortiWeb>= 7.0.0, <= 7.0.11affected
FortiWebFortinet / FortiWeb>= 7.2.0, <= 7.2.11affected
FortiWebFortinet / FortiWeb>= 7.4.0, <= 7.4.9affected
FortiWebFortinet / FortiWeb>= 7.6.0, <= 7.6.4affected
FortiWebFortinet / FortiWeb>= 8.0.0, <= 8.0.1affected