Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.
Vendor: Fortinet
Product: FortiWeb
EPSS: 0.911 (99.8th percentile, 2026-10-30)
FortiWeb is affected by a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2025-11-14.
Automated summary, checked against CISA and vendor descriptions; not yet reviewed by an analyst.
| Date | Event | Source |
|---|---|---|
| 2025-11-14 | Added to CISA KEV (confirmed exploitation) | CISA KEV |
Affected and fixed versions: see the vendor advisory or NVD entry below.