Fortinet FortiWeb flaw with public PoC exploited to create admin users

Published on November 14, 2025

A Fortinet FortiWeb path traversal vulnerability is being actively exploited to create new administrative users on exposed devices without requiring authentication [...]