CVE-2025-58034

This repository contains a functional exploit for chaining CVE-2025-64446 (authentication bypass via relative path traversal) and CVE-2025-58034 (authenticated OS command injection) to achieve unauthenticated remote code execution on Fortinet FortiWeb appliances. The exploit creates an administrative account and then executes arbitrary commands as root.

This repository provides a detailed technical analysis of CVE-2025-64446 (authentication bypass via relative path traversal) and CVE-2025-58034 (OS command injection in Fortinet FortiWeb). It includes root cause analysis, affected versions, and exploitation steps but lacks functional exploit code.

This repository provides a detailed technical analysis of CVE-2025-64446 (path traversal leading to admin account creation) and CVE-2025-58034 (command injection leading to RCE) in FortiWeb. It includes root cause analysis, exploit payloads, and screenshots but lacks functional exploit code.

This Metasploit module exploits an authentication bypass (CVE-2025-64446) and command injection (CVE-2025-58034) in Fortinet FortiWeb to achieve unauthenticated RCE with root privileges. It creates a new admin account via path traversal and then leverages command injection for execution.