VDB
CVE-2025-66178
CVE-2025-66178
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow an authenticated attacked to execute arbitrary commands via a specialy crafted HTTP request.
EPSS 0.04% · 11.8th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
EPSS Score
0.04%
11.8th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiWeb | 8.0.0, 7.6.0, 7.2.0 |
| fortinet | fortiweb | 7.2.0, 7.6.0, 7.0.0 |
Timeline
- Mar 10, 2026 CVE Published
- Mar 11, 2026 EPSS Score
- Mar 11, 2026 CVE Updated
- Mar 12, 2026 EPSS Score
- Mar 12, 2026 PoC Published
- Mar 13, 2026 EPSS Score
- Mar 14, 2026 EPSS Score
- Mar 15, 2026 EPSS Score
- Mar 16, 2026 EPSS Score
- Mar 17, 2026 EPSS Score
- Mar 17, 2026 Security Advisory
- Mar 17, 2026 Security Advisory
References
- https://www.fortiguard.com/psirt/FG-IR-26-078 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-096 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-098 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-080 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-088 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-094 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-092 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-090 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-081 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-095 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-093 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-083 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-087 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-079 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-086 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-077 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-082 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-097 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-085 advisory
- https://www.fortiguard.com/psirt/FG-IR-26-091 advisory
…and 4 more