PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Fortinet FortiWeb Authentication Bypass – CVE-2025-64446

bishopfox.com | vulnerability | Critical | Actively exploited | CVE-2025-64446 | #active-exploitation | #vulnerability-research | #authentication-bypass | #web-security | #scanner | #fortiweb | #cve-2025-64446 | #cisa-kev
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Bishop Fox confirms CVE-2025-64446: one HTTP POST with a path traversal and crafted header creates an admin account on vulnerable FortiWeb builds, giving device takeover; CISA KEV listed.
CVE
CVE-2025-64446
CVSS
9.8
Published
Collected

Related coverage

Critical · vulnerability · github.com
MicroTrick: MikroTik RouterOS Unauthenticated Takeover Exploit PoC (CVE-2026-86060)
MikroTik routers form critical edge infrastructure worldwide; with confirmed active exploitation in the wild and public PoC code available, unpatched edge devices face immediate risk of remote takeover.
Critical · vulnerability · github.com
GitLab CE/EE Unauthenticated Arbitrary File Read Exploit PoC (CVE-2026-85706)
GitLab is widely deployed across enterprise infrastructure; a CVSS 10.0 unauthenticated file read listed in CISA KEV enables attackers to leak gitlab-secrets.json and database credentials, easily leading to full instance takeover.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · netspi.com
CVE-2026-20127 – Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Overview & Takeaways
CVE-2026-20127 is a CVSS 10.0 authentication bypass in Cisco Catalyst SD-WAN Controller and Manager that lets unauthenticated attackers gain admin access; exploitation is confirmed in the wild.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
Back