CVE-2025-64446: Fortinet FortiWeb Path Traversal Vulnerability. Fortinet
Fortinet FortiWeb Path Traversal Vulnerability. Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.
- CISA KEV-listed (remediation due 2025-11-21)
- EPSS 91.8% (99.8% percentile)
- CVSS 9.8 critical