FortiWeb Path Traversal Exploit Attempt (CVE-2025-64446)

Mehulkumar Savajani@Msavajani

•updated Dec 4, 2025•6•0•101

Detects attempts to exploit a path traversal vulnerability (CVE-2025-64446) in FortiWeb. Attackers send a crafted POST request to create a new administrative user by targeting a specific URI and including keywords in the request body indicative of new admin creation.