New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild

Fortinet has released an urgent security advisory addressing a newly discovered zero-day vulnerability, CVE-2025-58034, in its FortiWeb web application firewall platform, after evidence emerged of active exploitation in the wild. The flaw, characterized as improper neutralization of special elements used in OS commands (CWE-78), enables authenticated attackers to execute unauthorized code or commands on targeted […]

The post New FortiWeb 0-Day Command Injection Vulnerability Exploited in the Wild appeared first on Cyber Security News.