Fortinet FortiWeb OS Command Injection Vulnerability
Fortinet · FortiWeb
Date added (CISA)
2025-11-18
Remediation due
2025-11-25
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.