On Thursday, Fortinet released an update for FortiWeb. Exploits have emerged that abuse the critical gap.

Proof-of-concept exploits have been released for a critical SQLi vulnerability in Fortinet FortiWeb that can be used to achieve pre-authenticated remote code execution on vulnerable servers.

Fortinet fixes a critical SQL injection vulnerability in FortiWeb (CVE-2025-25257), posing risks to database security.

Our client is a professional management consultancy and IT services provider, focused on delivering creative and innovative digital solutions. Their client base includes both startups and large ...

Our client is a professional management consultancy and IT services provider, focused on delivering creative and innovative digital solutions. Their client base includes both startups and large ...