Known Exploited Vulnerabilities July 18, 2025 · CISA KEV Catalog

CVE-2025-25257: Fortinet Forti Web SQL Injection Vulnerability

Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.

Read the original at CISA KEV Catalog ↗

Topics

Vulnerabilities & Patching

Mentions

CVE-2025-25257Fortinet

Related

CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 16, 2026

CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 01, 2026

CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026