{"history":[{"alert":0,"cve":"CVE-2025-64446","id":22910,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.91078, \"percentile\": 0.99811}"},{"alert":0,"cve":"CVE-2025-64446","id":20530,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.91078, \"percentile\": 0.9981}"},{"alert":0,"cve":"CVE-2025-64446","id":18498,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.91078, \"percentile\": 0.9981}"},{"alert":0,"cve":"CVE-2025-64446","id":16564,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.91078, \"percentile\": 0.9981}"},{"alert":0,"cve":"CVE-2025-64446","id":14542,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.91078, \"percentile\": 0.9981}"},{"alert":0,"cve":"CVE-2025-64446","id":12324,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.91078, \"percentile\": 0.9981}"},{"alert":0,"cve":"CVE-2025-64446","id":10310,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.91078, \"percentile\": 0.99809}"},{"alert":0,"cve":"CVE-2025-64446","id":7859,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.91078, \"percentile\": 0.99809}"},{"alert":0,"cve":"CVE-2025-64446","id":5636,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.91078, \"percentile\": 0.99808}"},{"alert":1,"cve":"CVE-2025-64446","id":3949,"kind":"cna","observed_at":1793701200,"payload":"{\"containers\": {\"adp\": [{\"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2025-64446\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2025-11-15T04:56:17.687579Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2025-11-14\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2026-02-26T16:56:56.973Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446\"}, {\"tags\": [\"exploit\"], \"url\": \"https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2025-11-20T21:16:49.529Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-11-20T21:16:49.289Z\", \"value\": \"Previously entered references were removed because they are not applicable to this CVE Record.\"}], \"title\": \"CVE Program Container\", \"x_generator\": {\"engine\": \"ADPogram 0.0.1\"}}], \"cna\": {\"affected\": [{\"cpes\": [\"cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"FortiWeb\", \"vendor\": \"Fortinet\", \"versions\": [{\"lessThanOrEqual\": \"8.0.1\", \"status\": \"affected\", \"version\": \"8.0.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.6.4\", \"status\": \"affected\", \"version\": \"7.6.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.4.9\", \"status\": \"affected\", \"version\": \"7.4.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.2.11\", \"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.0.11\", \"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.\"}], \"metrics\": [{\"cvssV3_1\": {\"attackComplexity\": \"LOW\", \"attackVector\": \"NETWORK\", \"availabilityImpact\": \"HIGH\", \"baseScore\": 9.4, \"baseSeverity\": \"CRITICAL\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"scope\": \"UNCHANGED\", \"userInteraction\": \"NONE\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C\", \"version\": \"3.1\"}, \"format\": \"CVSS\"}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-23\", \"description\": \"Escalation of privilege\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2026-01-14T09:16:10.074Z\", \"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\"}, \"references\": [{\"name\": \"https://fortiguard.fortinet.com/psirt/FG-IR-25-910\", \"url\": \"https://fortiguard.fortinet.com/psirt/FG-IR-25-910\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to FortiWeb version 8.0.2 or above\\nUpgrade to FortiWeb version 7.6.5 or above\\nUpgrade to FortiWeb version 7.4.10 or above\\nUpgrade to FortiWeb version 7.2.12 or above\\nUpgrade to FortiWeb version 7.0.12 or above\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"assignerShortName\": \"fortinet\", \"cveId\": \"CVE-2025-64446\", \"datePublished\": \"2025-11-14T15:50:52.778Z\", \"dateReserved\": \"2025-11-04T14:26:34.042Z\", \"dateUpdated\": \"2026-02-26T16:56:56.973Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"},{"alert":0,"cve":"CVE-2025-64446","id":3422,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.91078, \"percentile\": 0.99808}"},{"alert":1,"cve":"CVE-2025-64446","id":307,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2025-64446\", \"cwes\": [\"CWE-23\"], \"dateAdded\": \"2025-11-14\", \"dueDate\": \"2025-11-21\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://www.fortiguard.com/psirt/FG-IR-25-910 ; https://nvd.nist.gov/vuln/detail/CVE-2025-64446\", \"product\": \"FortiWeb\", \"requiredAction\": \"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.\", \"vendorProject\": \"Fortinet\", \"vulnerabilityName\": \"Fortinet FortiWeb Path Traversal Vulnerability\"}"}],"record":{"affected":[{"cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"FortiWeb","vendor":"Fortinet","versions":[{"lessThanOrEqual":"8.0.1","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThanOrEqual":"7.6.4","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.9","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.11","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.11","status":"affected","version":"7.0.0","versionType":"semver"}]}],"cna":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-64446","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2025-11-15T04:56:17.687579Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2025-11-14","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2026-02-26T16:56:56.973Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446"},{"tags":["exploit"],"url":"https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2025-11-20T21:16:49.529Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"timeline":[{"lang":"en","time":"2025-11-20T21:16:49.289Z","value":"Previously entered references were removed because they are not applicable to this CVE Record."}],"title":"CVE Program Container","x_generator":{"engine":"ADPogram 0.0.1"}}],"cna":{"affected":[{"cpes":["cpe:2.3:a:fortinet:fortiweb:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:8.0.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.11:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"FortiWeb","vendor":"Fortinet","versions":[{"lessThanOrEqual":"8.0.1","status":"affected","version":"8.0.0","versionType":"semver"},{"lessThanOrEqual":"7.6.4","status":"affected","version":"7.6.0","versionType":"semver"},{"lessThanOrEqual":"7.4.9","status":"affected","version":"7.4.0","versionType":"semver"},{"lessThanOrEqual":"7.2.11","status":"affected","version":"7.2.0","versionType":"semver"},{"lessThanOrEqual":"7.0.11","status":"affected","version":"7.0.0","versionType":"semver"}]}],"descriptions":[{"lang":"en","value":"A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C","version":"3.1"},"format":"CVSS"}],"problemTypes":[{"descriptions":[{"cweId":"CWE-23","description":"Escalation of privilege","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-01-14T09:16:10.074Z","orgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","shortName":"fortinet"},"references":[{"name":"https://fortiguard.fortinet.com/psirt/FG-IR-25-910","url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-910"}],"solutions":[{"lang":"en","value":"Upgrade to FortiWeb version 8.0.2 or above\nUpgrade to FortiWeb version 7.6.5 or above\nUpgrade to FortiWeb version 7.4.10 or above\nUpgrade to FortiWeb version 7.2.12 or above\nUpgrade to FortiWeb version 7.0.12 or above"}]}},"cveMetadata":{"assignerOrgId":"6abe59d8-c742-4dff-8ce8-9b0ca1073da8","assignerShortName":"fortinet","cveId":"CVE-2025-64446","datePublished":"2025-11-14T15:50:52.778Z","dateReserved":"2025-11-04T14:26:34.042Z","dateUpdated":"2026-02-26T16:56:56.973Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794457201,"cve":"CVE-2025-64446","description":"A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.","epss":{"date":"2026-11-12","epss":0.91078,"percentile":0.99811},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2025-64446","cwes":["CWE-23"],"dateAdded":"2025-11-14","dueDate":"2025-11-21","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://www.fortiguard.com/psirt/FG-IR-25-910 ; https://nvd.nist.gov/vuln/detail/CVE-2025-64446","product":"FortiWeb","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","shortDescription":"Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.","vendorProject":"Fortinet","vulnerabilityName":"Fortinet FortiWeb Path Traversal Vulnerability"},"kev_checked":1794522003,"products":"Fortinet FortiWeb","references":["https://fortiguard.fortinet.com/psirt/FG-IR-25-910","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-64446","https://github.com/watchtowrlabs/watchTowr-vs-Fortiweb-AuthBypass"],"score":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.4,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","provider":"fortinet","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C","version":"3.1"},"solutions":"Upgrade to FortiWeb version 8.0.2 or above\nUpgrade to FortiWeb version 7.6.5 or above\nUpgrade to FortiWeb version 7.4.10 or above\nUpgrade to FortiWeb version 7.2.12 or above\nUpgrade to FortiWeb version 7.0.12 or above","state":"PUBLISHED","title":"Fortinet FortiWeb Path Traversal Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.group-ib.com/blog/stray-cat-network-edge/?amp%3Butm_campaign=network-security&amp%3Butm_medium=social","id":243,"publisher":"Group-IB","title":"Stray Cat, Open Doors: How k0t Wanders Through the Network Edge"}]}