Get all your news in one place.
100's of premium titles.
One app.
Start reading
TechRadar
TechRadar
Sead Fadilpašić

Fortinet customers told to update immediately following major security issue - here's what we know

Abstract illustration of a firewall protecting servers.
  • CVE-2025-64446 allows unauthenticated attackers to run admin commands on FortiWeb WAF systems
  • Actively exploited in the wild; affects versions 7.0.0–8.0.1, patched in 8.0.2
  • CISA added it to KEV; Fortinet urges immediate patching or disabling internet-facing HTTP/HTTPS interfaces

Fortinet has released a fix for a critical vulnerability in its FortiWeb web application firewall (WAF), and has urged customers to update immediately, as the flaw is being actively exploited in the wild.

Sign up to read this article
Read news from 100's of titles, curated specifically for you.
Already a member? Sign in here
Related Stories
Top stories on inkl right now
One subscription that gives you access to news from hundreds of sites
Already a member? Sign in here
Our Picks
Fourteen days free
Download the app
One app. One membership.
100+ trusted global sources.