VYPR

FortiWeb CLI

by Fortinet

CVEs (2)

  • CVE-2025-47857MedAug 12, 2025
    risk 0.44cvss 6.7epss 0.00

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or command via crafted CLI commands.

  • CVE-2025-32766MedAug 12, 2025
    risk 0.42cvss 6.4epss 0.00

    A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7.4.8 allows a privileged attacker to execute arbitrary code or commands via crafted CLI commands