CVE-2025-64446

Fortinet FortiWeb Path Traversal Vulnerability

Fortiweb

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

14. Nov 2025

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-25-910
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446
• CISA
  Fortinet FortiWeb Path Traversal Vulnerability
• NVD
  CVE-2025-64446
• GitHub
  https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass