# Fortinet Fortiweb


- [CVE-2025-25257](https://insights.sbomify.com/CVE-2025-25257/): Fortinet FortiWeb SQL Injection (critical 9.6, exploited in the wild)
- [CVE-2026-24858](https://insights.sbomify.com/CVE-2026-24858/): Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel (critical 9.4, exploited in the wild)
- [CVE-2025-64446](https://insights.sbomify.com/CVE-2025-64446/): Fortinet FortiWeb Path Traversal (critical 9.4, exploited in the wild)
- [CVE-2025-58034](https://insights.sbomify.com/CVE-2025-58034/): Fortinet FortiWeb OS Command Injection (medium 6.7, exploited in the wild)
- [CVE-2020-29015](https://insights.sbomify.com/CVE-2020-29015/): SQL injection in Fortinet FortiWeb (critical 9.8)
- [CVE-2020-29016](https://insights.sbomify.com/CVE-2020-29016/): Memory corruption in Fortinet FortiWeb (critical 9.8)
- [CVE-2023-25610](https://insights.sbomify.com/CVE-2023-25610/): Memory corruption in FortiAnalyzer (critical 9.3)
- [CVE-2021-42756](https://insights.sbomify.com/CVE-2021-42756/): Memory corruption in FortiWeb (critical 9.3)
- [CVE-2025-59719](https://insights.sbomify.com/CVE-2025-59719/): Auth bypass in FortiWeb (critical 9.1)
- [CVE-2026-26035](https://insights.sbomify.com/CVE-2026-26035/): Auth bypass in FortiWeb (high 8.8)
- [CVE-2021-41018](https://insights.sbomify.com/CVE-2021-41018/): Command injection in n/a (high 8.8)
- [CVE-2021-43073](https://insights.sbomify.com/CVE-2021-43073/): Command injection in n/a (high 8.8)

---
From sbomify Insights: https://insights.sbomify.com/products/fortinet/fortiweb/