Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiWeb
EPSS: 0.547 (99.0th percentile, 2026-10-30)
FortiWeb is affected by a vulnerability that lets an authenticated attacker execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-11-18.
Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.
| Date | Event | Source |
|---|---|---|
| 2025-11-18 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.