News

Critical Vulnerability Exposes Fortinet FortiWeb to Full Takeover (CVE-2025-25257)

  • Deeba Ahmed--HackRead
  • published date: 2025-07-13 16:15:29 UTC

WatchTowr Labs reveals CVE-2025-25257, a critical FortiWeb SQL injection allowing unauthenticated remote code execution. Patch your FortiWeb 7.0,…

WatchTowr Labs reveals CVE-2025-25257, a critical FortiWeb SQL injection allowing unauthenticated remote code execution. Patch your FortiWeb 7.0, 7.2, 7.4, 7.6 devices immediately to prevent full sys… [+3206 chars]