FO
Product
FortiWeb
On CISA KEVExploited in the wild
126
CVEs
4
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 16High 49Medium 51Low 2
Watch
Add FortiWeb to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 8.0.0 through 8.0.3; 7.6.0 through 7.6.6; 7.4.0 through 7.4.11 |
| CVE-2025-64446 In wildKEV | 9.8 | Nov 14 | Fortinet FortiWeb Path Traversal Vulnerability Affected: 8.0.0 through 8.0.1; 7.6.0 through 7.6.4; 7.4.0 through 7.4.9; 7.2.0 through 7.2.11; 7.0.0 through 7.0.11 |
| CVE-2025-25257 In wildKEV | 9.8 | Jul 17 | Fortinet FortiWeb SQL Injection Vulnerability Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.7; 7.2.0 through 7.2.10; 7.0.0 through 7.0.10 |
| CVE-2025-58034 In wildKEV | 7.2 | Nov 18 | Fortinet FortiWeb OS Command Injection Vulnerability Affected: 7.6.0 through 7.6.4; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.2 through 7.0.11 |
Showing 4