CVE-2025-64446

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

91.84% chance of exploitation in the next 30 days, 100th percentile

CISA KEV

added 2025-11-14

Nuclei

critical · CWE-23

Published

2025-11-14

Updated

2026-02-26

Proof-of-concept exploits (11)

• 0xBlackash/CVE-2025-64446
• AN5I/cve-2025-64446-fortiweb-exploit
• CerberusMrXi/FortiWeb-cve-2025-64446-RCE-exploit
• D3crypT0r/CVE-2025-64446
• eagle-nett/FORTIWEB_CVE-2025-64446-58034
• fevar54/CVE-2025-64446-PoC---FortiWeb-Path-Traversal
• lequoca/fortinet-fortiweb-cve-2025-64446-58034
• litndat/Vulnerability-CVE-2025-64446-CVE-2025-58034
• soltanali0/CVE-2025-64446-Exploit
• sxyrxyy/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC
• verylazytech/CVE-2025-64446

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-64446.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/fortinet_fortiweb_rce…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/52502
• https://www.exploit-db.com/exploits/52495

References

• CVE Record
• NVD entry

Related

• CVE-2025-12735
• CVE-2025-63888
• CVE-2020-5504
• CVE-2021-44790
• CVE-2023-44487
• CVE-2024-25600