Dashboard / CVE-2025-58034

CVE-2025-58034

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

CISA Known Exploited Vulnerability

Vendor / Product Fortinet — FortiWeb
Date Added 2025-11-18
Remediation Due 2025-11-25
https://fortiguard.fortinet.com/psirt/FG-IR-25-513 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58034

Weakness Classification (1)

Affected Software (5)

VendorProductVersion
fortinet fortiweb 7.0.0 – 7.0.12
fortinet fortiweb 7.2.0 – 7.2.12
fortinet fortiweb 7.4.0 – 7.4.11
fortinet fortiweb 7.6.0 – 7.6.6
fortinet fortiweb 8.0.0 – 8.0.2

References & Advisories (2)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

54.72%
Raw Score 0.547240
Percentile 99.0%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links