ExploitPublished
Fortinet FortiWeb v8.0.1 · Auth Bypass
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is released, monitor vendor communications for updates. No vendor advisory or patch links are currently available.
Description
Fortinet FortiWeb v8.0.1 - Auth Bypass
Indicators of compromise
Exploit source code
# Titles:Fortinet FortiWeb v8.0.1 - Auth Bypass
# Author: nu11secur1ty
# Date: 11/15/2025
# Vendor: https://www.fortinet.com/
# Software: v8.0.1
# Reference: https://nvd.nist.gov/vuln/detail/CVE-2025-64446
## Description:
CVE-2025-64446 is a critical path traversal vulnerability affecting
multiple versions of Fortinet FortiWeb, a Web Application Firewall (WAF)
used to protect web applications and APIs.
The vulnerability allows an unauthenticated remote attacker to send
specially crafted HTTP/HT…References
Community reviews
Loading reviews…