CVE-2025-58034
HIGH KEVFortiWeb 7.0.0-7.0.11, 7.2.0-7.2.11, 7.4.0-7.4.10, 7.6.0-7.6.5, 8.0.0-8.0.1 - OS Command Injection
Title source: llmExploitation Summary
CVE-2025-58034 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added November 18, 2025.
EIP tracks 5 public exploits from researchers including lincemorado97, eagle-nett, lequoca, including a Metasploit module exploits/linux/http/fortinet_fortiweb_rce.
AI-analyzed exploit summary This repository contains a functional exploit for chaining CVE-2025-64446 (authentication bypass via relative path traversal) and CVE-2025-58034 (authenticated OS command injection) to achieve unauthenticated remote code execution on Fortinet FortiWeb appliances. The exploit creates an administrative account and then executes arbitrary commands as root.
Description
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.
Exploits (5)
This repository contains a functional exploit for chaining CVE-2025-64446 (authentication bypass via relative path traversal) and CVE-2025-58034 (authenticated OS command injection) to achieve unauthenticated remote code execution on Fortinet FortiWeb appliances. The exploit creates an administrative account and then executes arbitrary commands as root.
This repository provides a detailed technical analysis of CVE-2025-64446 (authentication bypass via path traversal) and CVE-2025-58034 (OS command injection) in FortiWeb. It includes exploit payloads, affected versions, and mitigation steps, but lacks complete functional exploit code.
This repository provides a detailed technical analysis of CVE-2025-64446 (authentication bypass via relative path traversal) and CVE-2025-58034 (OS command injection in Fortinet FortiWeb). It includes root cause analysis, affected versions, and exploitation steps but lacks functional exploit code.
This repository provides a detailed technical analysis of CVE-2025-64446 (path traversal leading to admin account creation) and CVE-2025-58034 (command injection leading to RCE) in FortiWeb. It includes root cause analysis, exploit payloads, and screenshots but lacks functional exploit code.
This Metasploit module exploits an authentication bypass (CVE-2025-64446) and command injection (CVE-2025-58034) in Fortinet FortiWeb to achieve unauthenticated RCE with root privileges. It creates a new admin account via path traversal and then leverages command injection for execution.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H