{"uuid": "fb32fc54-cede-48b6-8e64-8779e3482c42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-64446", "type": "exploited", "source": "https://t.me/Intel_Encyclopedia/2629", "content": "\u2728 Vulnerabilities & Exploits \u2728\n\nFortinet\u2019s silent patch sparks alarm as a critical FortiWeb flaw is exploited in the wild\n\n\u2014\n\nSummary:\n\n  \n       \n      \n\n\n\n\nSecurity researchers are warning about two critical vulnerabilities in Fortinet\u2019s FortiWeb appliances, now tracked under CVE-2025-64446, being actively exploited in the wild.\n\n\n\nAccording to findings published by watchTowr, one flaw allows unauthenticated actors to access internal CGI endpoints via relative path traversal, while the other authentication bypass issue lets them impersonate any administrator by abusing the \u201cHTTP_CGIINFO\u201d header.\n\n\n\nEven more troubling is the...\n\n\u2014\n\nSource: More work for admins as Google patches latest zero-day Chrome vulnerability  | CSO Online\nPublished: 2025-11-18 12:05\n\n#silent #fortinets #vulnerabilities__exploits\n\nhttps://www.csoonline.com/article/4091939/fortinets-silent-patch-sparks-alarm-as-a-critical-fortiweb-flaw-is-exploited-in-the-wild.html", "creation_timestamp": "2026-09-10T00:00:44.559639Z"}