7.2

CVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerability

CVSS: 7.2v3.1HighKEVAnalyzed
Published 18-11-2025Last modified 26-02-2026
Open JSON

Vulnerability summary

CVE-2025-58034 is a high (CVSS 7.2) OS Command Injection vulnerability in Fortinet FortiWeb. It is known to be exploited: CISA lists it, first on 18-11-2025. EPSS estimates a 54.72% chance of exploitation in the next 30 days, higher than 99% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
7.2/10
010
High · v3.1 (NVD)
EPSS score
54.72%
0%100%
Critical · -0.86 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits1metasploit

Timeline

  1. 18-11-2025
    PublishedVulnerability first disclosed.
  2. 18-11-2025
    Added to CISA KEVFortinet FortiWeb OS Command Injection Vulnerability
  3. 25-11-2025
    CISA remediation dueApply mitigations per vendor instructions.
  4. 26-02-2026
    Last modifiedVulnerability information updated.

Description

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

54.72%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-0.86 pp

From 55.58% on 22-09-2026

22-09-202622-10-2026
EPSS score
54.72%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
18-11-2025
Federal due date
25-11-2025

CISA required action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. fortiguard.fortinet.com/psirt/FG-IR-25-513 nvd.nist.gov/vuln/detail/CVE-2025-58034

Public exploits

1 found
  • MetasploitMetasploitremoteVerified

    Fortinet FortiWeb unauthenticated RCE

    exploit/linux/http/fortinet_fortiweb_rce

    Maturity: weaponized

Weaknesses

CWE · root cause

Affected systems

Fortinet1 product
  • fortiweb≥ 7.6.0, ≤ 7.6.4 | ≥ 7.4.0, ≤ 7.4.8 | ≥ 7.2.0, ≤ 7.2.11 | ≥ 7.0.2, ≤ 7.0.11 | ≥ 7.0.0, < 7.0.12 | ≥ 7.2.0, < 7.2.12 | ≥ 7.4.0, < 7.4.11 | ≥ 7.6.0, < 7.6.6 | ≥ 8.0.0, < 8.0.2

1 vendor · 1 product

References

2 links