CVE-2025-58034

Name of the Vulnerable Software and Affected Versions FortiWeb versions 8.0.0 through 8.0.1 FortiWeb versions 7.6.0 through 7.6.5 FortiWeb versions 7.4.0 through 7.4.10 FortiWeb versions 7.2.0 through 7.2.11 FortiWeb versions 7.0.0 through 7.0.11

Description An OS Command Injection issue exists due to the improper neutralization of special elements used in OS commands. This flaw allows an authenticated attacker to execute unauthorized code or commands with system-level privileges on the underlying system by sending crafted HTTP requests or using the CLI interface. This issue has been actively exploited in the wild, potentially allowing attackers to compromise device integrity, modify or disable web protections, and pivot deeper into network environments.

Recommendations Update FortiWeb versions 8.0.0 through 8.0.1 to the latest patched version. Update FortiWeb versions 7.6.0 through 7.6.5 to the latest patched version. Update FortiWeb versions 7.4.0 through 7.4.10 to the latest patched version. Update FortiWeb versions 7.2.0 through 7.2.11 to the latest patched version. Update FortiWeb versions 7.0.0 through 7.0.11 to the latest patched version.