Fortinet FortiWeb vulnerabilities

7 advisories, 5 actively exploited. Last update: August 12, 2026.

Running FortiWeb devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiWeb alerts

FG-IR-26-158August 12, 2026Critical 9.8
Fortinet: Broken access control in the RADIUS type admin group
FG-IR-26-157August 12, 2026Medium 5.3
Fortinet: Content-Encoding WAF Evasion
CVE-2025-59718December 16, 2025Critical 9.8Exploited
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
CVE-2025-58034November 18, 2025High 7.2Exploited
Fortinet FortiWeb OS Command Injection Vulnerability
CVE-2025-64446November 14, 2025Critical 9.8Exploited
Fortinet FortiWeb Path Traversal Vulnerability
CVE-2025-25257July 18, 2025Critical 9.8Exploited
Fortinet FortiWeb SQL Injection Vulnerability
CVE-2024-23113October 9, 2024Critical 9.8Exploited
Fortinet Multiple Products Format String Vulnerability