Exploit / PoCcriticalExploited in the wild

Fortinet FortiWeb flaw CVE-2025

Security Affairsby @securityaffairsJul 19, 2025 · 16:25 UTC (Jul 19, 2025)3 min read3 · 2 reads

Read at securityaffairs.com

Analyze CVE-2025-25257 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-25257

Tags: cve-2025-25257 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-25257	Critical Unauthenticated SQL Injection in Fortinet FortiWeb (CVE-2025-25257)	9.8	100%	KEVPoC ×2	Jul 17, 2025 KEV Jul 18, 2025

From the original article

3 min read at securityaffairs.com

Hackers exploited a Fortinet FortiWeb flaw the same day a PoC was published, compromising dozens of systems. Hackers began exploiting a critical Fortinet FortiWeb flaw, tracked as CVE-2025-25257 (CVSS score of 9. 6), on the same day a proof-of-concept (PoC) exploit was published, leading to dozens of compromised systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.