References https://fortiguard.fortinet.com/psirt/FG-IR-25-513 https://www.secrss.com/articles/85199 https://cloud.tencent.com/developer/article/2592970 https://x.threatbook.com/v5/article?threatInfoID=161419 https://www.venustech.com.cn/new_type/aqtg/20251120/28966.html https://www.gm7.org/archives/79 https://nsfocusglobal.com/fortinet-fortiweb-authentication-bypass-and-command-injection-vulnerability-cve-2025-64446-cve-2025-58034-notice/ https://www.cybersecuritydive.com/news/command-injection-flaw-fortinet-fortiweb-exploitation/806027/ https://www.cnvd.org.cn/flaw/show/CNVD-2025-23616 https://cve.imfht.com/poc_detail/99e8fafd3a56a89ac0ea573a971138574943bff5
Related VulnerabilitiesPoCCVE-2026-39808: Fortinet FortiSandbox - Command InjectionFortinet FortiSandbox /fortisandbox/job-detail/tracer-behavior 命令执行漏洞(CVE-2026-39808)PoCCVE-2026-21643: Fortinet FortiClientEMS 7.4.4 - SQL InjectionPoCCVE-2025-52970: Fortinet FortiWeb - Authentication Bypass to Admin PrivilegeFortinet FortiOS等 签名验证不当漏洞Fortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446/CVE-2025-58034)PoCCVE-2025-64446: FortiWeb - Authentication BypassFortinet FortiWeb /api/v2.0/cmdb/system/admin%3f/../../../../../cgi-bin/fwbcgi 权限绕过漏洞(CVE-2025-64446)Fortiweb 存在路径穿越漏洞(CVE-2025-64446)PoCFortinet FortiWeb 未授权身份验证绕过漏洞(CVE-2025-64446)