Обход аутентификации + переход по пути в Fortinet FortiWeb для создания новых административных пользователей на незащищенных устройствах без необходимости аутентификации.
Metasploit module: https://github.com/rapid7/metasploit-framework/pull/20698
Dork:
ZoomEye Dork: app="FortiWeb"
HUNTER: product.name="FortiWeb"
Shodan: http.title:FortiWeb
Affected versions:
• 8.0: <8.0.2
• 7.6: <7.6.5
• 7.4: <7.4.10
• 7.2: <7.2.12
• 7.0: <7.0.12
• 6.4: <= 6.4.3
• 6.3: <= 6.3.23
Blog:
Critical Vulnerability in Fortinet FortiWeb Exploited in the Wild
On October 6, 2025, the cyber deception company Defused published a proof-of-concept exploit on social media that was captured by one of their Fortinet FortiWeb Manager honeypots. Read more in Rapid7's latest Emergent Threat Response.www.rapid7.com
Metasploit module: https://github.com/rapid7/metasploit-framework/pull/20698
Dork:
ZoomEye Dork: app="FortiWeb"
HUNTER: product.name="FortiWeb"
Shodan: http.title:FortiWeb
Affected versions:
• 8.0: <8.0.2
• 7.6: <7.6.5
• 7.4: <7.4.10
• 7.2: <7.2.12
• 7.0: <7.0.12
• 6.4: <= 6.4.3
• 6.3: <= 6.3.23