CVE-2025-25257criticalunder attackCWE-89

CVE-2025-25257: critical vulnerability in Fortinet FortiWeb

Published · Updated

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.6epss 100%
from disclosure to weapon0 days
Published on NVDJul 17
1st PoCJul 10
CISA KEV+1d
exploitation probability
100%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
25 public exploit(s)
Action required by CISAfederal deadline: 2025-08-08

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

FortiWeb versions 7.0 through 7.6 contain a SQL injection vulnerability that allows attackers to execute arbitrary SQL commands without authentication. This is critical because an attacker could access, modify, or delete sensitive database information.

Technical detail

SQL injection vulnerability in FortiWeb allows unauthenticated attackers to inject malicious SQL code through crafted HTTP/HTTPS requests due to improper input neutralization. Affected versions include 7.0.0-7.0.10, 7.2.0-7.2.10, 7.4.0-7.4.7, and 7.6.0-7.6.3. Successful exploitation enables unauthorized database access and manipulation with CVSS 9.6 criticality.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C
Affected products
Fortinet · FortiWeb
public PoCs found — 25
cve_referencewww.exploit-db.com/exploits/52473unverifiedgithubgithub.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257★ 100cve_referencegithub.com/0xbigshaq/CVE-2025-25257★ 64githubgithub.com/TheStingR/CVE-2025-25257★ 5githubgithub.com/mrmtwoj/CVE-2025-25257★ 1githubgithub.com/imbas007/CVE-2025-25257★ 1githubgithub.com/aitorfirm/CVE-2025-25257★ 1githubgithub.com/0xgh057r3c0n/CVE-2025-25257★ 1githubgithub.com/segfault-it/CVE-2025-25257★ 1githubgithub.com/lytianahkone-boop/cve-2025-25257★ 0githubgithub.com/adilburaksen/CVE-2025-25257-Exploit-Tool★ 0githubgithub.com/mr-r3b00t/CVE-2025-25257★ 0githubgithub.com/GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection★ 0vulncheckvulncheck.com/xdb/f23ee9358510unverifiedvulncheckvulncheck.com/xdb/7a2557fc2f73unverifiedvulncheckvulncheck.com/xdb/ec7c6d77c99dunverifiedvulncheckvulncheck.com/xdb/473881a780ecunverifiedvulncheckvulncheck.com/xdb/35a9d869b266unverifiedvulncheckvulncheck.com/xdb/4bc99adfe77aunverifiedvulncheckvulncheck.com/xdb/85aaeec7fc2eunverifiedvulncheckvulncheck.com/xdb/7790d175f3a0unverifiedvulncheckvulncheck.com/xdb/d688fc77d00eunverifiedcve_referencepacketstorm.news/files/id/210193/unverifiedvulncheckvulncheck.com/xdb/3723362eecdcunverifiedvulncheckvulncheck.com/xdb/273941969e28unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Fortinet FortiWeb

In the same product, most dangerous first.

CVE-2025-64446CRITICALCVE-2025-64446EPSS 91.8%KEVCVE-2026-24858CRITICALCVE-2026-24858EPSS 85.8%KEVCVE-2025-58034MEDIUMCVE-2025-58034EPSS 55.6%KEVCVE-2021-42756CRITICALCVE-2021-42756EPSS 35.0%CVE-2025-59719CRITICALCVE-2025-59719EPSS 29.2%CVE-2023-25610CRITICALCVE-2023-25610EPSS 18.3%
References
https://fortiguard.fortinet.com/psirt/FG-IR-25-151https://github.com/0xbigshaq/CVE-2025-25257https://packetstorm.news/files/id/210193/https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25257https://www.exploit-db.com/exploits/52473