CVE-2025-64446 — Fortinet / FortiWeb

Description (CNA)

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Affected (CNA)

Vendor / product	Versions
Fortinet / FortiWeb	affected 8.0.0 through 8.0.1; affected 7.6.0 through 7.6.4; affected 7.4.0 through 7.4.9; affected 7.2.0 through 7.2.11; affected 7.0.0 through 7.0.11

CWE

CWE-23

References

https://fortiguard.fortinet.com/psirt/FG-IR-25-910

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446
https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass

CVE

No English description supplied.

No references supplied.