Fortinet has launched fixes for a important safety flaw impacting FortiWeb that might allow an unauthenticated attacker to run arbitrary database instructions on vulnerable cases.
Tracked as CVE-2025-25257, the vulnerability carries a CVSS rating of 9.6 out of a most of 10.0.
“An improper neutralization of particular parts utilized in an SQL command (‘SQL Injection’) vulnerability [CWE-89] in
Fortinet Releases Patch for Vital SQL Injection Flaw in FortiWeb (CVE-2025-25257)
