CVE-2025-58034

Published Nov 18, 2025

Last updated 14 days ago

Fortinet FortiWeb

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-58034 is an OS command injection vulnerability affecting Fortinet FortiWeb. It may allow an authenticated attacker to execute unauthorized code on the underlying system. This can be achieved through crafted HTTP requests or CLI commands. Fortinet has released security updates to address this zero-day vulnerability, which has been actively exploited in attacks. It was reported by Jason McFadyen from Trend Micro's Trend Research team. Administrators are advised to upgrade their FortiWeb devices to the latest available software versions to block potential attacks.

Description: An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
Source: psirt@fortinet.com
NVD status: Analyzed
Products: fortiweb

Risk scores

CVSS 3.1

Type: Secondary
Base score: 7.2
Impact score: 5.9
Exploitability score: 1.2
Vector string: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: HIGH

Known exploits

Data from CISA

Vulnerability name: Fortinet FortiWeb OS Command Injection Vulnerability
Exploit added on: Nov 18, 2025
Exploit action due: Nov 25, 2025
Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Weaknesses

psirt@fortinet.com: CWE-78

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CDE13E2A-CEC3-4FC7-98AD-11CA1EAEC0C0",
            "versionEndExcluding": "7.0.12",
            "versionStartIncluding": "7.0.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "551127B2-DCE9-403D-8073-ACD717CD0B19",
            "versionEndExcluding": "7.2.12",
            "versionStartIncluding": "7.2.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F43B659D-6EA7-46F5-9778-0FD0FD036AA9",
            "versionEndExcluding": "7.4.11",
            "versionStartIncluding": "7.4.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E5D27F6-0659-4D98-9585-FD84B433CCB5",
            "versionEndExcluding": "7.6.6",
            "versionStartIncluding": "7.6.0"
          },
          {
            "criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F1DD8ABA-9BB5-4ED8-9E34-1CB0752651DF",
            "versionEndExcluding": "8.0.2",
            "versionStartIncluding": "8.0.0"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.