VULNERABILITY INTELLIGENCE

CVE-2025-64446

CVSS score9.8 CRITICAL
EPSS probability91.08%
CISA KEVKnown exploited vulnerability
Published2025-11-14
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Known Exploited Vulnerability

Fortinet FortiWeb Path Traversal Vulnerability

Vendor / product: Fortinet / FortiWeb

Description

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Weakness classification

  • psirt@fortinet.com: CWE-23

Primary references