Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-58034

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Published

2025-11-18T17:16:05.057

Last Modified

2025-11-21T18:27:43.280

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 7.2 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-78
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortiweb < 7.0.12 Yes
Application fortinet fortiweb < 7.2.12 Yes
Application fortinet fortiweb < 7.4.11 Yes
Application fortinet fortiweb < 7.6.6 Yes
Application fortinet fortiweb < 8.0.2 Yes
References