Fortinet has disclosed a critical authentication bypass vulnerability in its FortiWeb web application firewall that allows unauthenticated attackers to log in as any existing user on affected devices.
The vulnerability, tracked as CVE-2025-52970 and dubbed "Fort-Majeure" by security researcher Aviv Y, affects multiple versions...
Fortinet has disclosed a critical SQL injection vulnerability affecting multiple versions of FortiWeb, their web application firewall solution.
The security vulnerability, classified as CWE-89, enables unauthenticated attackers to execute unauthorized SQL commands through specially crafted HTTP and HTTPS requests, potentially compromising entire database systems...