Fortinet has silently patched a critical zero-day vulnerability in its FortiWeb web application firewall, which is now being ...
A Fortinet FortiWeb path traversal vulnerability is being actively exploited to create new administrative users on exposed ...
On October 6, 2025, security researchers at Defused reported a path traversal flaw in Fortinet’s FortiWeb web application firewall (WAF) being exploited in-the-wild as a zero-day since October 2025.