> Fortinet FortiWeb Flaw Actively Exploited in the Wild Before Company's Silent Patch
[DATE: 14/11/2025 09:00]
[LANGUAGE: EN]
Cybersecurity researchers are sounding the alert about an authentication bypass vulnerability in Fortinet Fortiweb WAF that could allow an attacker to take over admin accounts and completely compromise a device.
"The watchTowr team is seeing active, indiscriminate in-the-wild exploitation of what appears to be a silently patched vulnerability in Fortinet's FortiWeb product," Benjamin Harris,