Skip to content

CVE

CVE-2025-52970

8.1
CVSS 3.1
1
story
Severity
8.1 High · vendor score
Published
Aug 12, 2025
Weakness
CWE-233

What it is

A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.

From the National Vulnerability Database

Decipher coverage · 1 story

Newest first ↑
  1. VulnerabilitiesFortinet CVE-2025-64446 Under Active AttackThat vulnerability (CVE-2025-64446) affects several versions of FortiWeb and CISA  has added it to its Known Exploited Vulnerabilities catalog.DENNIS FISHER · 2 MIN

Official references

4 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE record

Advisories, fixes & analysis

Vendor advisoryfortiguard.fortinet.com/psirt/FG-IR-25-448Exploitpwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970