sign in--:--:--UTC

CVE-2025-25257

exploited in the wild☆ pin

CVSS

—

Reports

3

First seen

Jul 10, 2025

Last seen

Jul 23, 2025

Affected product

Fortinet FortiWeb 7.0.0–7.0.10, 7.2.0–7.2.10, 7.4.0–7.4.7, 7.6.0–7.6.3

Associated actors

Hafnium ×1 Salt Typhoon ×1 Scattered Spider ×1

Recent reports

Risky Business #799 — Multiple critical vulnerabilities and breaches across tech vendors

Risky BusinessJul 23, 2025 High

Fortinet FortiWeb SQL Injection Vulnerability (CVE-2025-25257)

NICS TaiwanJul 15, 2025 Critical

Multiple Vulnerabilities in Fortinet Products – CVE-2025-25257 Exploited In The Wild

GovCERT.HKJul 10, 2025

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans