CVE-2025-64446

Fortinet FortiWeb Path Traversal Vulnerability

Fortinet FortiWebNetwork & edge

CVSS

9.4Critical

ExploitationExploited in the wildAdded to KEV 14 Nov 2025CISA KEV

Exploit odds (EPSS)92.0%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS

Fixed inNone listedNo source names a fixed version. Check the vendor advisory below

Federal deadline21 Nov 2025Remediation due date for US federal agenciesCISA KEV

CISA required actionApply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

14 Nov 2025Exploit code publicMetasploit
14 Nov 2025Added to CISA KEVCISA KEV
14 Nov 2025, 15:50 UTCPublishedCVE List

Public exploit code and templates 5

Auxiliary moduleFortinet FortiWeb create new local admin 14 Nov 2025Metasploit
Exploit moduleFortinet FortiWeb unauthenticated RCE 14 Nov 2025Metasploit
Webapps exploitFortiWeb 8.0.2 - Remote Code Execution 8 Apr 2026Exploit-DB
Webapps exploitFortinet FortiWeb v8.0.1 - Auth Bypass 6 Apr 2026Exploit-DB
Scanner templateFortiWeb - Authentication BypassNuclei

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Reports 1

1 outlet mention it. Reports are not confirmation; each links to its source.

@cybersecurity.page: Attackers are breaching enterprise firewalls and VPNs, exposing 70,000+ credentials via known flaws like CVE-2025-64446 (FortiWeb) and CVE-2026-0257 (PAN-OS), plus brute-force attaBluesky: CVE posts, 24 Oct 2026

Description

Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Text from CVE List

Affected versions 5

FortiWebaffected: 8.0.0 through 8.0.1CVE List
FortiWebaffected: 7.6.0 through 7.6.4CVE List
FortiWebaffected: 7.4.0 through 7.4.9CVE List
FortiWebaffected: 7.2.0 through 7.2.11CVE List
FortiWebaffected: 7.0.0 through 7.0.11CVE List