Threats tagged 'ghsa-47cr-8w72-ggmc'

CVE-2025-58034 is an OS Command Injection vulnerability in Fortinet FortiWeb versions 7.0.0 through 7.0.11, 7.2.0 through 7.2.11, 7.4.0 through 7.4.10, 7.6.0 through 7.6.5, and 8.0.0 through 8.0.1. It allows an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. The vulnerability has a high severity with a CVSS score of 7.2. Public exploit code is available via Metasploit, but there is no indication of active exploitation in the wild. No patch or remediation information is provided in the source data.