FortiWeb vulnerabilities

42 known vulnerabilities in FortiWeb from Fortinet. 42 are rated high or critical, and 4 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  FortiWeb: Improper Authentication

  CVE-2026-26035Aug 12, 2026Fortinet

  An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthentica

• 7.2 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2026-40688Apr 14, 2026FortinetEPSS 6.68%

  An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a remote privileged attacker to execute arbitrary code or command via crafted HTTP requ

• 8.1 High severity

  FortiWeb: Improper Control of Interaction Frequency

  CVE-2026-24017Mar 10, 2026Fortinet

  An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow a r

• 7.2 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2025-66178Mar 10, 2026FortinetEPSS 1.91%

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 thro

• 9.8 Critical severity

  Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Exploited

  CVE-2026-24858Jan 27, 2026FortinetEPSS 86.6%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiMan

• 7.5 High severity

  FortiWeb: Use of Password Hash Instead of Password for Authentication

  CVE-2025-64471Dec 9, 2025Fortinet

  A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0

• 8.1 High severity

  FortiWeb: Reliance on Cookies without Validation and Integrity Checking

  CVE-2025-64447Dec 9, 2025FortinetEPSS 8.94%

  A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an unaut

• 9.8 Critical severity

  FortiWeb: Improper Verification of Cryptographic Signature

  CVE-2025-59719Dec 9, 2025FortinetEPSS 27.4%

  An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML

• 7.2 High severity

  Fortinet FortiWeb OS Command Injection Exploited

  CVE-2025-58034Nov 18, 2025FortinetEPSS 54.7%

  An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2

• 9.8 Critical severity

  Fortinet FortiWeb Path Traversal Exploited

  CVE-2025-64446Nov 14, 2025FortinetEPSS 91.1%

  A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands

• 8.1 High severity

  FortiWeb: Improper Handling of Parameters

  CVE-2025-52970Aug 12, 2025FortinetEPSS 9.32%

  A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker with non-public information pertai

• 9.8 Critical severity

  Fortinet FortiWeb SQL Injection Exploited

  CVE-2025-25257Jul 17, 2025FortinetEPSS 99.9%

  An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 al

• 7.2 High severity

  FortiOS: Improper Privilege Management

  CVE-2025-22254Jun 10, 2025Fortinet

  An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiProxy 7.6.0 through 7.6.

• 7.2 High severity

  FortiWeb: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-25254Apr 8, 2025FortinetEPSS 17.1%

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, 7.2 all versions, 7.0 all versions endpoint may allow an authenticated admin to access and mo

• 7.5 High severity

  FortiOS: Channel Accessible by Non-Endpoint

  CVE-2024-50565Apr 8, 2025Fortinet

  A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version

• 7.2 High severity

  FortiWeb: Incorrect User Management

  CVE-2024-46671Apr 8, 2025Fortinet

  An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, version 7.2.10 and below, version 7.0.11 and below widgets dashboard may allow an authenticated attacker with at least read-only admin permission

• 7.5 High severity

  FortiProxy: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2024-26013Apr 8, 2025Fortinet

  A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0

• 9.8 Critical severity

  FortiSwitchManager: Buffer Underwrite

  CVE-2023-25610Mar 24, 2025FortinetEPSS 18.3%

  A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2

• 9.8 Critical severity

  FortiWeb: Improper Handling of Syntactically Invalid Structure

  CVE-2024-55594Mar 14, 2025Fortinet

  An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.

• 7.2 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-29059Mar 14, 2025Fortinet

  An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in FortiWeb version 7.0.1 and below, 6.4.2 and below, 6.3.20 and below, 6.2.7 and below may allow a privileged attacker to execute SQL commands over

• 7.2 High severity

  FortiWeb: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-55597Mar 11, 2025Fortinet

  A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted requests.

• 7.2 High severity

  FortiPAM: Use of Externally-Controlled Format String

  CVE-2024-45324Mar 11, 2025Fortinet

  A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy version 7.4.0 through 7.4.6, version 7.2.0 through 7.2.12 and b

• 9.8 Critical severity

  FortiWeb: Improper Handling of Syntactically Invalid Structure

  CVE-2023-42784Mar 11, 2025Fortinet

  An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.

• 7.2 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-50569Feb 11, 2025FortinetEPSS 1.78%

  A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.

• 7.2 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-50567Feb 11, 2025FortinetEPSS 2.2%

  An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.0 through 7.6.0 allows attacker to execute unauthorized code or commands via crafted input.

• 9.1 Critical severity

  FortiVoice: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-48885Jan 16, 2025Fortinet

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all

• 9.1 Critical severity

  FortiOS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-48884Jan 14, 2025FortinetEPSS 15.2%

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, F

• 8.8 High severity

  FortiWeb: Improper Authorization

  CVE-2024-23665Jun 3, 2024Fortinet

  Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below, version 7.2.7 and below, version 7.0.10 and below, version 6.4.3 and below, version 6.3.23 and below may allow an authenticated attacker to perform unauthorized ADOM

• 8.8 High severity

  FortiWeb: Protection Mechanism Failure

  CVE-2023-34984Sep 13, 2023Fortinet

  A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.

• 7.2 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-23777Jul 11, 2023FortinetEPSS 1.27%

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.18 and below may allow a privileged attacker to execute arbitrary bash comma

• 7.8 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-43948Apr 11, 2023Fortinet

  A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.3, FortiADC version 7.1.0 through 7.1.1, FortiADC version 7.0.0 through 7.0.3, FortiADC 6.2 all versions, FortiADC 6.1 a

• 8.8 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2022-39951Mar 7, 2023FortinetEPSS 1.69%

  A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or comm

• 7.8 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2023-25602Feb 16, 2023Fortinet

  A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versions 6.1.2 and earlier, FortiWeb versions 6.0.7 and earlier, FortiWeb versions 5.9.1 and earlier, Forti

• 7.8 High severity

  FortiWeb: Use of Externally-Controlled Format String

  CVE-2023-23783Feb 16, 2023Fortinet

  A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorized code or commands via specially crafted command arguments.

• 7.8 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2023-23782Feb 16, 2023Fortinet

  A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 all versions, FortiWeb 6.1 all versions allows attacker to escalation of privilege via specifically cr

• 8.8 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2023-23781Feb 16, 2023Fortinet

  A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration may allow an authenticated attacker to achieve arbitrary code execution via specifically crafted XML

• 8.8 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2023-23780Feb 16, 2023Fortinet

  A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versions allows attacker to escalation of privilege via specifically crafted HTTP requests.

• 8.8 High severity

  FortiWeb: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-23779Feb 16, 2023FortinetEPSS 1.32%

  Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below may allow an authenticated attacker to execute unauthor

• 7.8 High severity

  FortiWeb: Double Free

  CVE-2022-40683Feb 16, 2023Fortinet

  A double free in Fortinet FortiWeb version 7.0.0 through 7.0.3 may allows attacker to execute unauthorized code or commands via specially crafted commands

• 7.2 High severity

  FortiWeb: Out-of-bounds Write

  CVE-2022-33871Feb 16, 2023Fortinet

  A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and earlier, 6.4 all versions, version 6.3.19 and earlier may allow a privileged attacker to execute arbitrary code or commands via specifically crafted CLI `execute backup-local r