Threat Intel

v0.1

← CVEs

CVE-2025-66178

HIGH 7.2
Published
2026-03-10
Last Modified
2026-03-12
Affected Apps
1
Affected Devices
1
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow an authenticated attacked to execute arbitrary commands via a specialy crafted HTTP request.
Affected Applications in Environment 1
Forticlient v7.4.0.1658
1 device
Affected Devices 1
DPSOTA-4JTY044 Windows
References 1