> Path confusion vulnerability in GUI
[DATE: 14/11/2025 08:00]
[LANGUAGE: EN]
CVSSv3 Score:
9.1
A relative path traversal vulnerability [CWE-23] in FortiWeb may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.Fortinet has observed this to be exploited in the wild
Revised on 2025-11-14 00:00:00