CVE-2025-64446 Fortinet FortiWeb
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
- CVSS
- not scored
On CISA’s exploited list
Fortinet FortiWeb Path Traversal Vulnerability
- Added
- 2025-11-14
- Federal patch deadline
- 2025-11-21
- Ransomware use
- not known