CVE-2025-64446
🔥 Known Exploited (CISA KEV)CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
Affected Platforms (CPE)
📦
Fortinet
Fortiweb
>= 7.0.0 and < 7.0.12>= 7.2.0 and < 7.2.12>= 7.4.0 and < 7.4.10>= 7.6.0 and < 7.6.5>= 8.0.0 and < 8.0.2