Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiWeb
EPSS: 0.999 (100.0th percentile, 2026-10-30)
FortiWeb is affected by a SQL injection vulnerability that lets an unauthenticated attacker execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-07-18.
Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.
| Date | Event | Source |
|---|---|---|
| 2025-07-18 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.