Fortinet’s Double Trouble: More Zero-Days, Fewer Answers!
Fortinet’s FortiWeb is in hot water again with another zero-day vulnerability, CVE-2025-58034, that lets savvy hackers run wild with OS command injections. What’s the latest advice? Update your FortiWeb versions, keep them off the internet, and watch out for suspicious user accounts. Who knew cybersecurity could be this thrilling?
Hot Take:
Fortinet is back at it again with their zero-day vulnerability saga, proving once more that it’s not a real party until the cybercriminals join in. With the latest news of CVE-2025-58034, Fortinet seems determined to keep us all on the edge of our seats, or at least on the edge of our network security devices. Who needs horror movies when you have cybersecurity vulnerabilities keeping you up at night?
Key Points:
– Fortinet disclosed a second zero-day vulnerability, CVE-2025-58034, in its FortiWeb product line.
– The flaw has a CVSS score of 6.7 and allows authenticated attackers to run code through crafted HTTP requests or CLI commands.
– The vulnerability is separate from CVE-2025-64446 but can be chained for more significant risk.
– Patching was completed before public disclosure, raising questions about Fortinet’s transparency.
– CISA recommends a one-week remediation timeframe for CVE-2025-58034 due to ongoing attacks.