HIGHCVSS 7.2Actively exploited · CISA KEV since 2025-11-18Vulnerability
CVE-2025-58034
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
Properties
- Euvd product
- FortiWeb
- Vulnerability name
- Fortinet FortiWeb OS Command Injection Vulnerability
- First seen
- 2026-02-26T16:21:13+00:00
- Cvss score
- 7.2
- Epss score
- 0.54724
- Last seen
- 2026-10-19T12:00:27+00:00
- Due date
- 2025-11-25
- Euvd assigner
- fortinet
- Retrieved at
- 2026-10-21T01:24:48+00:00
- Exploited euvd since
- 2025-11-18T00:00:00+00:00
- Src batch id
- epss_history-20261020T103617Z-728ddd
- Source url
- https://epss.empiricalsecurity.com/epss_scores-2026-10-19.csv.gz
- Date added
- 2025-11-18
- Score
- 7.2
- Euvd base score version
- 3.1
- Fetched at
- 2026-10-20T10:36:20+00:00
- Euvd vendor
- Fortinet
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- In Signal since
- initial import (Sep 2026)
- Euvd base score
- 6.7
Related Entities (4)
AFFECTS_PRODUCT (1)
DESCRIBES (1)
HAS_WEAKNESS (1)
INVOLVES (1)
Explore deeper with Ninja Signal's threat intelligence graph