CVE-2024-55594

—

CVSS 3.1

9.8 critical

EPSS

<1%p42

Published

Mar 14, 2025 (Mar 14, 2025)

Modified

Jun 17, 2026

Description

An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and 7.2.0 through 7.2.10 and 7.0.0 through 7.0.10 allows attacker to execute unauthorized code or commands via HTTP/S crafted requests.

Vendors: fortinet
Products: fortiweb
Weakness: CWE-228
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.