Skip to main content

CISA updates advisory on Fortinet FortiWeb vulnerabilities affecting remote code execution

Source Decision Insights Threat Desk Published November 28, 2025 Companies 2
Human View Machine View

2 companies named across 4 categories, one of 43 articles referencing Fortinet. Previous coverage: CISA issues update to Known Exploited Vulnerabilities Catalog including Fortinet flaw (Nov 2025).

Companies mentioned

Best suited for

Persona
Security Operations Leader
Decision stage
Which to buy
Adoption curve
Early Majority
Industry
Information Technology / Software & Services / IT Services / Internet Services & Infrastructure

Our classification, not the publisher's statement. Best suited for, not only for.

Fortinet FortiWeb, a Web Application Firewall (WAF), is affected by two vulnerabilities that could allow unauthorized remote code execution. These security weaknesses pose risks to the affected FortiWeb versions by enabling attackers to perform actions including administrative command execution and privilege escalation.

The two vulnerabilities are identified as CVE-2025-64446 and CVE-2025-58034. CVE-2025-64446 impacts FortiWeb versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11. CVE-2025-58034 affects versions 8.0.0 through 8.0.1, 7.6.0 through 7.6.5, 7.4.0 through 7.4.10, 7.2.0 through 7.2.11, and 7.0.0 through 7.0.11. CVE-2025-64446 is classified as a Relative Path Traversal vulnerability (CWE-23), allowing unauthenticated attackers to execute administrative commands using specially crafted Hypertext Transfer Protocol (HTTP) or HTTPS requests. CVE-2025-58034 is an Operating System (OS) Command Injection vulnerability (CWE-78) permitting authenticated attackers to run unauthorized code through crafted HTTP requests or Command-Line Interface (CLI) commands.

Exploitation of these vulnerabilities can permit unauthorized remote code execution on FortiWeb systems. Threat actors may leverage CVE-2025-64446 for initial access and subsequently exploit CVE-2025-58034 to escalate privileges on the targeted device. The combined exploitation may lead to complete compromise of affected FortiWeb appliances.

Fortinet advises upgrading affected FortiWeb devices to the following versions to remediate these vulnerabilities: for FortiWeb 8.0, upgrade to 8.0.2 or later; for 7.6, upgrade to 7.6.5 or later for CVE-2025-64446 and 7.6.6 or later for CVE-2025-58034; for 7.4, upgrade to 7.4.10 or later for CVE-2025-64446 and 7.4.11 or later for CVE-2025-58034; for 7.2, upgrade to 7.2.12 or later; and for 7.0, upgrade to 7.0.12 or later. If immediate upgrades are not feasible, disabling HTTP or HTTPS access on internet-facing interfaces is recommended to reduce exposure, though this does not fully resolve the vulnerabilities. Post-upgrade, reviewing system configurations and logs for unauthorized changes is advised.

The vulnerabilities have been added to the Known Exploited Vulnerabilities (KEV) Catalog on November 14, 2025 (CVE-2025-64446) and November 18, 2025 (CVE-2025-58034). Organizations are encouraged to apply updates accordingly and monitor for anomalous behavior. Reporting incidents and unusual activity to CISA’s Operations Center is available.

Blog post, originally published by CISA at cisa.gov.

Mentions

Structured data (JSON-LD)

The schema.org markup this page publishes for search engines and AI agents, exactly as they read it.

[
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#website",
    "@type": "WebSite",
    "name": "Decision Insights",
    "potentialAction": {
      "@type": "SearchAction",
      "target": {
        "@type": "EntryPoint",
        "urlTemplate": "https://decisioninsights.ai/search/?q={search_term_string}&submit=1"
      }
    },
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    },
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/#organization",
    "@type": "Organization",
    "contactPoint": {
      "@type": "ContactPoint",
      "contactType": "customer support",
      "email": "[email protected]"
    },
    "description": "Decision Insights is a Registry of technology companies, open source projects, and industry terms, built for people and for AI agents that need sourced, structured information.",
    "logo": {
      "@type": "ImageObject",
      "url": "https://wiretap-cdn-assets.nyc3.cdn.digitaloceanspaces.com/decision-insights/[email protected]"
    },
    "name": "Decision Insights",
    "parentOrganization": {
      "@type": "Organization",
      "name": "Wiretap Labs",
      "sameAs": [
        "https://www.linkedin.com/company/wiretap-labs",
        "https://www.crunchbase.com/organization/wiretap-labs"
      ],
      "url": "https://wiretaplabs.com"
    },
    "publishingPrinciples": "https://decisioninsights.ai/standards/",
    "sameAs": [
      "https://www.linkedin.com/company/decisioninsights"
    ],
    "url": "https://decisioninsights.ai"
  },
  {
    "@context": "https://schema.org",
    "@type": "BreadcrumbList",
    "itemListElement": [
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai",
        "name": "Decision Insights",
        "position": 1
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/records/",
        "name": "Records",
        "position": 2
      },
      {
        "@type": "ListItem",
        "item": "https://decisioninsights.ai/cisa-updates-advisory-on-fortinet-fortiweb-vulnerabilities-affecting-remote-code-execution/",
        "name": "CISA updates advisory on Fortinet FortiWeb vulnerabilities affecting remote code execution",
        "position": 3
      }
    ]
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/cisa-updates-advisory-on-fortinet-fortiweb-vulnerabilities-affecting-remote-code-execution/#blogposting",
    "@type": "BlogPosting",
    "about": {
      "@id": "https://decisioninsights.ai/registry/fortinet/#organization",
      "@type": "Organization",
      "mainEntityOfPage": "https://decisioninsights.ai/registry/fortinet/",
      "name": "Fortinet"
    },
    "audience": [
      {
        "@type": "Audience",
        "additionalType": "Persona",
        "audienceType": "Security Operations Leader"
      },
      {
        "@type": "Audience",
        "additionalType": "Adoption curve",
        "audienceType": "Early Majority"
      },
      {
        "@type": "Audience",
        "additionalType": "Industry",
        "audienceType": "Information Technology / Software & Services / IT Services / Internet Services & Infrastructure"
      }
    ],
    "author": {
      "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
      "@type": "Person",
      "name": "Decision Insights Threat Desk",
      "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
    },
    "dateModified": "2026-08-23T13:15:39-06:00",
    "datePublished": "2025-11-28T16:58:38-07:00",
    "description": "CISA updates advisory on Fortinet FortiWeb vulnerabilities CVE-2025-64446 and CVE-2025-58034, outlining affected versions and remediation steps.",
    "headline": "CISA updates advisory on Fortinet FortiWeb vulnerabilities affecting remote code execution",
    "isBasedOn": {
      "@type": "CreativeWork",
      "author": {
        "@type": "Person",
        "name": "CISA"
      },
      "sourceOrganization": {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/",
        "name": "Department of Homeland Security"
      },
      "url": "https://www.cisa.gov/news-events/alerts/2025/11/14/fortinet-releases-security-advisory-relative-path-traversal-vulnerability-affecting-fortiweb"
    },
    "keywords": [
      "Command-Line Interface",
      "Known Exploited Vulnerabilities",
      "Operating System",
      "Vulnerabilities"
    ],
    "mainEntityOfPage": {
      "@id": "https://decisioninsights.ai/cisa-updates-advisory-on-fortinet-fortiweb-vulnerabilities-affecting-remote-code-execution/",
      "@type": "WebPage",
      "sdDatePublished": "2026-08-23",
      "sdPublisher": {
        "@id": "https://decisioninsights.ai/#organization"
      }
    },
    "mentions": [
      {
        "@id": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/department-of-homeland-security/cybersecurity-and-infrastructure-security-agency-cisa/",
        "name": "Cybersecurity and Infrastructure Security Agency (CISA)"
      },
      {
        "@id": "https://decisioninsights.ai/registry/fortinet/#organization",
        "@type": "Organization",
        "mainEntityOfPage": "https://decisioninsights.ai/registry/fortinet/",
        "name": "Fortinet"
      }
    ],
    "publisher": {
      "@id": "https://decisioninsights.ai/#organization"
    }
  },
  {
    "@context": "https://schema.org",
    "@id": "https://decisioninsights.ai/author/decision-insights-threat-desk/#person",
    "@type": "Person",
    "description": "CISA advisories, vendor security bulletins, and CVE disclosures, summarized into sourced briefs. Produced under our Standards & Methodology.",
    "name": "Decision Insights Threat Desk",
    "sameAs": [
      "https://www.linkedin.com/showcase/decisioninsights/"
    ],
    "url": "https://decisioninsights.ai/author/decision-insights-threat-desk/"
  }
]

Is this your company? Get structured data for your own pages