Fortinet customers told to update immediately following major security issue - here's what we know

Fortinet has released a fix for a critical vulnerability in its FortiWeb web application firewall (WAF), and has urged ...
CSO OnlineOpinion

Fortinet criticized for ‘silent’ patching after disclosing second zero-day vulnerability in same equipment

CISA orders agencies to patch the FortiWeb web application firewall within seven days after news of exploits emerges.
SecurityWeek

Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability

Fortinet said an exploited FortiWeb vulnerability (CVE-2025-64446) allows attackers to gain administrative access to the ...
CSO Online

Fortinet’s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild

Researchers say the flaw, affecting thousands of internet-facing FortiWeb instances, was exploited long before Fortinet ...

Fortinet confirms silent patch for FortiWeb zero-day exploited in attacks

Fortinet has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now being ...
Cyber Daily

US cyber agency warns of active exploitation of Fortinet FortiWeb path traversal vulnerability

Security experts warned of exploitation last week, and now CISA and Fortinet have both released advisories regarding CVE-2025 ...
Dark Reading

Critical Fortinet FortiWeb WAF Bug Exploited in the Wild

A critical Fortinet FortiWeb vulnerability capable of remote code execution has been exploited in the wild.