CISA gives federal agencies one week to patch exploited Fortinet bug
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-64446 | Unauthenticated Path Traversal in Fortinet FortiWeb Enables Admin Command Execution | 9.8 | 91% | KEVPoC | KEV |
From the original article
3 min read at therecord.media
The federal government confirmed on Friday that hackers are exploiting a vulnerability affecting Fortinet devices that has caused alarm among cybersecurity experts since early October. The Cybersecurity and Infrastructure Security Agency (CISA) gave all federal civilian agencies seven days to patch CVE-2025-64446 and released an advisory that said it is “aware of exploitation.”
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.