Fortinet Silently Patches Critical FortiWeb Zero-Day Under Active Exploitation
Fortinet has confirmed a critical zero-day vulnerability in its FortiWeb web application firewall, actively exploited to create unauthorized admin accounts on exposed devices. The flaw, tracked as CVE-2025-64446, was silently patched weeks ago, but many systems remain at risk. This incident underscores the urgency for swift updates and robust network defenses in enterprise security.
