FortiWeb
No CISA KEV deadline is open. CISA last added a FortiWeb CVE on 18 Nov 2025.
Tracked since 22 Jan · latest article Fri 23 Oct · RSS
Exploited, by due date
CSV downloadDeadlines passed
14 articles from 5 outlets since 22 Jan; 2 in the last 7 days.
- Article
- First report
Show as table
Who reported 5 outlets, last 12 months
- The Hacker News4
- Security Affairs3
- SecurityWeek3
- SecurityOnline3
- Dark Reading1
- Hackers Target Exposed Fortinet and Palo Alto Firewalls in Global CampaignThe Hacker News
- Hackers Steal 70,000 Credentials in Fortinet and Palo Alto AttacksSecurityOnline
- Espionage Group Exploits WinRAR Flaw to Target CIS GovernmentsSecurityOnline
- Silent Lynx Exploits WinRAR Flaw in Attacks on CIS GovernmentsThe Hacker News
- Fortinet patches CVE-2026-26035 auth bypass in FortiWebSecurityWeek
- Attackers exploit FortiGate devices to access sensitive network informationSecurity Affairs
- ⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & MoreThe Hacker News
- Fortinet warns of active FortiCloud SSO bypass affecting updated devicesSecurity Affairs
- Fortinet Confirms FortiCloud SSO Exploitation Against Patched DevicesSecurityWeek
- Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate FirewallsThe Hacker News
All CVEs in coverage
4How these numbers are made
CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.
CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.
Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.
Product names are grouped by normalised names, with version and edition tails removed.
Fix listed refers to an advisory. Unknown fix status is counted as not listed.