What’s Vulnerable › Products

Fortinet FortiWeb vulnerabilities

126 known vulnerabilities, 4 confirmed exploited in the wild (CISA KEV), 30 published in the last 12 months.

Check whether your Fortinet FortiWeb version is affected

Exploited Fortinet FortiWeb vulnerabilities

• CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability
• CVE-2025-64446 — Fortinet FortiWeb Path Traversal Vulnerability
• CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability

Latest Fortinet FortiWeb vulnerabilities

• CVE-2026-70466 — (CVSS 5.3)
• CVE-2026-26035 — (CVSS 9.8)
• CVE-2026-40688 — (CVSS 7.2)
• CVE-2026-39814 — (CVSS 6.7)
• CVE-2026-39811 — (CVSS 4.9)
• CVE-2026-30897 — (CVSS 6.6)
• CVE-2026-24641 — (CVSS 6.5)
• CVE-2026-24640 — (CVSS 6.6)
• CVE-2026-24017 — (CVSS 8.1)
• CVE-2025-66178 — (CVSS 7.2)
• CVE-2025-48840 — (CVSS 5.3)
• CVE-2026-24858 — Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability (CVSS 9.8) — exploited
• CVE-2025-64471 — (CVSS 7.5)
• CVE-2025-64447 — (CVSS 8.1)
• CVE-2025-59719 — (CVSS 9.8)
• CVE-2025-59669 — (CVSS 5.5)
• CVE-2025-58034 — Fortinet FortiWeb OS Command Injection Vulnerability (CVSS 7.2) — exploited
• CVE-2025-64446 — Fortinet FortiWeb Path Traversal Vulnerability (CVSS 9.8) — exploited
• CVE-2024-47569 — (CVSS 4.3)
• CVE-2025-53609 — (CVSS 4.9)
• CVE-2025-52970 — (CVSS 8.1)
• CVE-2025-47857 — (CVSS 6.7)
• CVE-2025-32766 — (CVSS 6.7)
• CVE-2025-27759 — (CVSS 6.7)
• CVE-2025-25257 — Fortinet FortiWeb SQL Injection Vulnerability (CVSS 9.8) — exploited