Fortinet has issued a critical patch for a critical vulnerability in its FortiWeb product, a web application firewall commonly used in enterprises. Identified as CVE-2025-25257, this high-severity issue is an unauthenticated SQL injection flaw that lets remote attackers run unauthorized SQL commands through specially crafted HTTP or HTTPS requests. “An improper neutralization of special elements … Continue reading CVE-2025-25257
Fortinet Addresses Major SQL Injection Flaw in FortiWeb