Curated security research, vulnerabilities, advisories and tools for practitioners.

← back | CVE Intelligence

CVE-2025-64446 [Critical] [Actively exploited]

Curated 1 security research writeups, vulnerability advisories and exploitation analyses for CVE-2025-64446.

CVSS: 9.8
Exploit Status: Actively exploited
Coverage Span: 2025-11-19
Reports: 1 related reports

Associated Reports & Timeline

Fortinet FortiWeb Authentication Bypass – CVE-2025-64446

Bishop Fox confirms CVE-2025-64446: one HTTP POST with a path traversal and crafted header creates an admin account on vulnerable FortiWeb builds, giving device takeover; CISA KEV listed.