ExploitPublished
FortiWeb 8.0.2 · Remote Code Execution
Source Exploit-DB RSS Feed
0
Severity
CriticalRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is available, consider applying temporary mitigations recommended by the vendor if any, and restrict network access to FortiWeb management interfaces to trusted sources only.
Description
FortiWeb 8.0.2 - Remote Code Execution
Indicators of compromise
Exploit source code
# Exploit Title: FortiWeb 8.0.2 - Remote Code Execution
# Date: 2025-11-22
# Author: Mohammed Idrees Banyamer
# Author Country: Jordan
# Instagram: @banyamer_security
# GitHub: https://github.com/mbanyamer
# Vendor Homepage: https://www.fortinet.com
# Software Link: https://www.fortinet.com/products/web-application-firewall/fortiweb
# Version: FortiWeb < 7.6.7, < 7.8.7, < 8.0.2
# Tested on: FortiWeb 7.4.2, 7.6.0, 7.6.1 (VM builds)
# CVE: CVE-2025-64446
# CVSS: 9.8 (Critical)
# Category: WebApps…References
Community reviews
Loading reviews…