High severity · published Nov 18, 2025
CVE-2025-58034
Fortinet FortiWeb OS Command Injection Vulnerability
In wildKEV
7.2
CVSS
54.7%
EPSS
Yes
On KEV
Description
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)54.7% · higher than 99% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 18, 2025
Federal remediation dueNov 25, 2025
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiWeb · Fortinet
7.6.0 through 7.6.4; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.2 through 7.0.11 · source: vendor, NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-58034: Fortinet FortiWeb - Fortinet FortiWeb OS Command Injection Vulnerability
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
FOFortiWebCVE-2025-58034
Nov 18, 2025·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-58034
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-58034
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
fortiguard.fortinet.com
https://fortiguard.fortinet.com/psirt/FG-IR-25-513
More from FortiWeb
9.8
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
9.8
CVE-2025-64446
Fortinet FortiWeb Path Traversal Vulnerability
9.8
CVE-2025-25257
Fortinet FortiWeb SQL Injection Vulnerability
9.8
CVE-2026-26035
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb…
9.8
CVE-2025-59719
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an…