Fortinet Warns of New FortiWeb CVE-2025-58034 Vulnerability Exploited in the Wild

Fortinet has warned of a new FortiWeb vulnerability, tracked as CVE-2025-58034, that is being exploited in the wild. The flaw is classified as medium severity with a CVSS of 6.7/10 and is described as an OS Command Injection (CWE-78) that could allow an authenticated attacker to execute arbitrary operating system commands via crafted HTTP requests or CLI commands.

According to Fortinet, successful exploitation requires the attacker to authenticate through another means before chaining CVE-2025-58034 to run commands. Fortinet notes that the issue has been addressed in multiple FortiWeb versions, with upgrades recommended to 8.0.2 or above, 7.6.6 or above, 7.4.11 or above, 7.2.12 or above, and 7.0.12 or above.

The company credited Trend Micro researcher Jason McFadyen for reporting the flaw under its responsible disclosure policy, and it emphasised that PSIRT remediation efforts are ongoing. It also references Fortinet’s prior silence on another critical FortiWeb flaw (CVE-2025-64446), which was patched in version 8.0.2.