CVE Watch—

CVE-2025-58034

Fortinet FortiWeb OS Command Injection Vulnerability

CVSS

—

Sin CVSS

EPSS

55.6%

p99

KEV

SÍ

18 nov 2025

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

54.4%EPSS · 30 días55.6%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Fortinet / FortiWeb

Vulnerabilidad

Fortinet FortiWeb OS Command Injection Vulnerability

Añadido a KEV

18 nov 2025

Remediar antes de

25 nov 2025

Uso conocido en ransomware

Descripción resumida

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://fortiguard.fortinet.com/psirt/FG-IR-25-513 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58034

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2025-25257—

99.9%

KEV—80Fortinet FortiWeb SQL Injection Vulnerability—CVE-2025-64446—

99.8%

KEV—80Fortinet FortiWeb Path Traversal Vulnerability—