FortiWeb 8.0 vulnerabilities
3 advisories affect Fortinet FortiWeb 8.0, 1 already exploited by attackers. Latest: August 12, 2026.
Running FortiWeb 8.0 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiWeb 8.0 alerts
Turn on FortiWeb 8.0 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet: Broken access control in the RADIUS type admin group FG-IR-26-158 · August 12, 2026 | Critical 9.8 | from 8.0.0 to 8.0.2 Fixed in 8.0.3 |
| Fortinet: Content-Encoding WAF Evasion FG-IR-26-157 · August 12, 2026 | Medium 5.3 | from 8.0.0 to 8.0.2 Fixed in 8.0.3 |
| Fortinet FortiWeb Path Traversal Vulnerability CVE-2025-64446 · November 14, 2025 | Critical 9.8 Exploited | from 8.0.0 to 8.0.1 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.