H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-58034

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Vulnerability
TypeVulnerability
External ID—
First seen2025-11-18
Last seen2025-11-18

Confidence

—

Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.

Labels

exploitedkev

CISA KEV context

Vendor / productFortinet FortiWeb
Added2025-11-18
Due date2025-11-25
6 recorded

Relationships

mitigates
from Remediate CVE-2025-58034
Mitigation
related-to
to Argument Injection
Technique
related-to
to Command Delimiters
Technique
related-to
to Command Line Execution through SQL Injection
Technique
related-to
to Exploiting Multiple Input Interpretation Layers
Technique
related-to
to OS Command Injection
Technique
2 external

References

nvd
CVE-2025-58034
open
cwe
CWE-78
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance