CVE-2025-58034 kev in the critical feed json
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Forti…
published 2025-11-18 11 mo ago modified 2026-10-18 21 d ago also EUVD-2025-198020
- cvss
- 7.2
- version 3.1, CNA
- cisa kev
- Exploited
- added 2025-11-18
- epss
- 54.7%
- EPSS 54.7% chance of exploitation in 30 days, percentile 99%
- public exploits
- 1
- Metasploit
Summary
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
Patch / fix
cisa required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- fortinet fortiweb 7.0.12, 7.2.12, 7.4.11, 7.6.6, 8.0.2
Timeline
- First public exploit (Metasploit exploit/linux/http/fortinet_fortiweb_rce)
- Added to CISA KEV
- Published
- CISA SSVC: exploitation active
- CISA patch deadline
Known exploited
- Added
- 11 mo ago
- Patch by
- 2025-11-25 (11 mo ago)
- Ransomware
- Not known
- Required action
- Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
- Vendor, product
- Fortinet, FortiWeb
- CISA name
- Fortinet FortiWeb OS Command Injection Vulnerability
CISA SSVC
- Exploitation
- Active, exploited in the wild
- Automatable
- no
- Technical impact
- total
- Assessed
- 11 mo ago
Exploit prediction
54.72% chance of exploitation in the next 30 days, higher than 99% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Metasploit exploit/linux/http/fortinet_fortiweb_rce Fortinet FortiWeb unauthenticated RCE metasploit exploit, excellent rank, 2025-11-14
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.7 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C |
| CNA | 3.1 | 7.2 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Affected products
- Fortinet FortiWeb
Classification
- Weakness
-
- CWE-78 Improper Neutralization of Special Elements used in an OS Command
- Technology feeds
References
-
fortiguard.fortinet.com
/psirt/FG-IR-25-513
vendor-advisory
-
cisa.gov
/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58034
government-resource, us-government-resource
Sources
- CVE List CVE-2025-58034
- NVD CVE-2025-58034
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.