CVE-2025-58034mediumunder attackCWE-78

CVE-2025-58034: medium-severity vulnerability in Fortinet FortiWeb

Published · Updated

90Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 6.7epss 56%
from disclosure to weapon1 days
Published on NVDNov 18
1st PoC+1d
metasploitNov 14
CISA KEVNov 18
exploitation probability
56%top 1% of all CVEs
observed exploitation
yesCISA + VulnCheck
4 public exploit(s)
Action required by CISAfederal deadline: 2025-11-25

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

A flaw in Fortinet FortiWeb allows a logged-in attacker to run unauthorized commands on the server by sending specially crafted requests. This could let them take control of the system and steal or damage data.

Technical detail

OS command injection vulnerability in FortiWeb versions 7.0.0–8.0.1 allows authenticated attackers to execute arbitrary OS commands via improperly sanitized HTTP requests or CLI input. The vulnerability stems from insufficient neutralization of special shell metacharacters, enabling command chaining or substitution attacks that bypass intended access controls.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Affected products
Fortinet · FortiWeb
public PoCs found — 4
vulncheckvulncheck.com/xdb/7a261e254219unverifiedvulncheckvulncheck.com/xdb/75954314d47eunverifiedvulncheckvulncheck.com/xdb/424461d6fe73unverifiedvulncheckvulncheck.com/xdb/2659bee2fffaunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Fortinet FortiWeb

In the same product, most dangerous first.

CVE-2025-25257CRITICALCVE-2025-25257EPSS 99.8%KEVCVE-2025-64446CRITICALCVE-2025-64446EPSS 91.8%KEVCVE-2026-24858CRITICALCVE-2026-24858EPSS 85.8%KEVCVE-2021-42756CRITICALCVE-2021-42756EPSS 35.0%CVE-2025-59719CRITICALCVE-2025-59719EPSS 29.2%CVE-2023-25610CRITICALCVE-2023-25610EPSS 18.3%
References
https://fortiguard.fortinet.com/psirt/FG-IR-25-513https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58034