Top Tweets for #Fortiweb
When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446) #FortiWeb #AuthBypass #CVE202564446 #PathTraversal #Impersonation https://t.co/kIXDsDEmS3
FortiWeb users, is your patch game strong? 🛡️ Threat actors are turning unpatched appliances into launchpads for Sliver C2. Don't be the digital equivalent of leaving your front door unlocked! 🤦♀️ Get insight: https://t.co/2c0BCU3YLe #CyberSecurity #FortiWeb #PatchTuesday
Metasploit Releases New Exploit for Fresh FortiWeb 0-Day Vulnerabilities https://t.co/Hv7AUuobEa via @GBHackers Security
#cybersecurity #infosec #metasploit #fortinet #fortiweb #zeroday #vulnerability
The state of unpatched #FortiWeb WAFs right now…
This is basically a live feed of what a public PoC unleashes. Every few minutes another actor fires off the same simple web request and drops yet another admin user onto the systems. Some of these WAFs already have more admin accounts than the companies have employees 🫣
I’m not saying PoCs are “bad”; I’m saying this is what happens once they’re out. And this time you can watch it almost in real time.
A critical FortiWeb flaw is under attack, allowing attackers to hijack admin accounts and fully compromise devices, prompting Fortinet to release version 8.0.2 to address the vulnerability. #CyberSecurity #FortiWeb https://t.co/zlu12uERbh
#fortigate
/api/v2.0/cmdb/system/admin-> 401
/api/v2.0/cmdb/system/admin%3F/../../../../../cgi-bin/fwbcgi-> 200
Maybe not exploitable (why? different code base? 🧐- not tested) but seems weird.
Currently everyone is on #fortiweb but we still have 0 feedback on this
cc @Fortinet
#FortiWeb auth-bypass looks older and messier than it first appeared
Internet-facing FortiWebs show attacker-created local admins going back to July 2025
Earliest admin accounts we’ve seen:
super_admin, Fortiweb-tech
The same devices are now getting fresh hits after @watchtowrcyber published their write-up and PoC, and after @DefusedCyber highlighted the exploitation attempts. That material is already baked into active campaigns, and we’re seeing the results on compromised hosts.
Recent attacker-created admin users on these boxes:
Fortiadmin001, Testpoint, trader, trader1, nuclei-test
and a stack of random-looking logins:
ECfZeCcw, pijnegxk, pxjqtdeq, q5KYL32t, rfnxjdbv, rghbmgkp, uvagffka, vtrxicns
So for FortiWeb this isn’t just "someone dropped a PoC in November" - some of these devices have likely been sitting compromised since at least July 2025, now getting new admins layered on top
#fortigate
/api/v2.0/cmdb/system/admin-> 401
/api/v2.0/cmdb/system/admin%3F/../../../../../cgi-bin/fwbcgi-> 200
Maybe not exploitable (why? different code base? 🧐- not tested) but seems weird.
Currently everyone is on #fortiweb but we still have 0 feedback on this
cc @Fortinet
And Auth. Bypass seems to work too so... maybe affected as well ?
Someone to confirm ?
(Yep, I do not have direct access)
#fortinet cc @SimoKohonen
#FortiWeb 7.0.12 fixes this vulnerability as well
We confirm the #FortiWeb issue is massively exploited in the wild.
After analysis and tests, we can confirm as well, this vulnerability is fixed in the following versions:
- 8.0: 8.0.2
- 7.6: 7.6.5
- 7.4: 7.4.10
- 7.2: 7.2.12
⚠️Unknown Fortinet exploit (possibly a CVE-2022-40684 variant) from 64.95.13.8 🇺🇸 ( BLNWX )
VirusTotal Detections: 0/95 🟢
JWT payload translates into:
{
"username": "admin",
"profname": "prof_admin",
"vdom": "root",
"loginname": "admin"
}
Fortinet FortiWeb zero day lets attackers take admin control via the interface. Update to 8.0.2 and keep the interface off the internet.
#cybersecurity #infosec #Fortinet #FortiWeb #zeroday #vulnerability #securityalert #patchnow #webapplicationsecurity #enterprisesecurity
🛑 Fortinet
👉 Une faille de sécurité critique affecte FortiWeb et elle est déjà exploitée pour créer des comptes administrateurs à distance, sans authentification. 🧨
🧷 Tous les détails par ici : https://t.co/LwBvUNGdCz
#Fortinet #FortiWeb #infosec #cybersecurity
📉 Less noise. 📈 More efficiency.
ICYMI: We just enhanced our web application security portfolio, offering:
✔️ AI-Powered Simplicity
✔️ End-to-End Compliance
✔️ Enhanced Customer Value
Now available in both #FortiWeb and FortiAppSec Cloud—delivering one unified platform for smarter operations and stronger application security.
👉 Learn more about the latest updates: https://t.co/plygKu3n58
Enough complexity. Time for efficiency. 🔐
We just expanded our web application security portfolio with:
🔹 FortiAI-Assist — a built-in virtual AI assistant to simplify operations
🔹 Integrated client-side protection to ensure PCI DSS 4.0 compliance
Available in #FortiWeb and FortiAppSec Cloud, delivering one platform for smarter, unified protection.
🔗 Explore the latest update: https://t.co/IGt2kDBrTE
FortiWeb Pre-Auth RCE (CVE-2025-25257) #FortiWeb #RCE #SQLi #CVE202525257 #PreAuth https://t.co/EkGo2SiF50
Mass exploitation of CVE-2025-25257 from 36.24.16.56 🇨🇳 (Chinanet)
VT Detections: 0/94 🟢
Payloads: 📸
UNION SELECT version(),2,3
(SQL injection for version enumeration )
Vulnerability analysis experiments: explaining the exploitation of CVE-2025-25257 (Fortinet FortiWeb SQL Injection to RCE) - ENG SUB, MAIN ITA
https://t.co/qiKBuMbmTm
#fortinet #fortiweb #cve_2025_25257 #vulnerability #exploit #BugBounty
Last Seen Hashtags on Sotwe
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
119.2M followers
Cristiano Ronaldo
@cristiano
111.9M followers
Donald J. Trump
@realdonaldtrump
111.8M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
98M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.2M followers
KATY PERRY
@katyperry
88.4M followers
Taylor Swift
@taylorswift13
82.3M followers
Lady Gaga
@ladygaga
73.8M followers
Virat Kohli
@imvkohli
71M followers
Kim Kardashian
@kimkardashian
70.1M followers
YouTube
@youtube
68.7M followers
Bill Gates
@billgates
64.3M followers
Neymar Jr
@neymarjr
63.9M followers
The Ellen Show
@theellenshow
62.4M followers
CNN
@cnn
61.8M followers
Selena Gomez
@selenagomez
61.5M followers
X
@x
60.8M followers