FAIL › dossier
fortiweb
PRODUCT· dossier confidence 50%
Fortinet, a major cybersecurity vendor, has experienced multiple high-severity vulnerabilities in recent years, including remote code execution and path traversal flaws, indicating potential weaknesses in their development and security practices.
PROFILE
CategoryCybersecurityWhat they doFortinet Inc. provides a broad range of cybersecurity solutions, including network security, application security, and cloud security. The company develops and sells its products globally.SizeLarge (Revenue: $7.11B)
Websitehttps://markets.ft.com/data/equities/tearsheet/profile?s=FTNT:NSQ ↗
SECURITY POSTURE
Fortinet has demonstrated a history of significant security vulnerabilities, particularly related to remote code execution and path traversal issues.
Notable failures
- CVE-2025-58034: OS command injection (RCE)
- CVE-2025-64446: Path traversal RCE
- CVE-2025-25257: SQL Injection
- CVE-2024-48884: Path traversal in FortiManager
- CVE-2024-48885: Path traversal in FortiRecorder
Patterns: Recurring RCE vulnerabilities; Path traversal vulnerabilities
FAILURE HISTORY · 5
| DATE | EVENT | SEV | SUMMARY |
|---|---|---|---|
| 2025-11-18 | CVE-2025-58034 | high | Fortinet FortiWeb OS command injection allowed unauthorized code execution by authenticated attackers. |
| 2025-11-14 | CVE-2025-64446 | high | FortiWeb RCE due to unpatched path traversal |
| 2025-07-18 | CVE-2025-25257 | high | FortiWeb SQL Injection allowed unauthenticated attackers to execute SQL code. |
| 2025-01-14 | CVE-2024-48884 | high | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, FortiOS 7.2.0 through |
| 2025-01-16 | CVE-2024-48885 | medium | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7 |
DOSSIER SOURCES
- Fortinet Inc, FTNT:NSQ profile - FT.com · markets.ft.com
- Fortinet (FTNT) Revenue 2006-2026 - Stock Analysis · stockanalysis.com
- Business Segments Fortinet, Inc. - MarketScreener.com · www.marketscreener.com
Open questions: What is FortiWeb's current market share? · What is Fortinet's overall security posture?
DOSSIER · dex-RAG synthesis · grounded in our own collection + trusted sourcesbuilt 2026-07-28 12:42:52.554719+00:00