CVE-2025-64446 PoC — Fortinet FortiWeb 安全漏洞

Source

https://github.com/soltanali0/CVE-2025-64446-Exploit

Associated Vulnerability

Title:Fortinet FortiWeb 安全漏洞 (CVE-2025-64446)
Description:A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Readme

# CVE-2025-64446-Exploit

CVE-2025-64446 exploit on fortiweb (waf) whit this exploit you can crate user and password . 


## hwo to runing ? 
```python
python3 exploit_forti.py targets.txt
python3 exploit_forti.py 192.168.1.1
python3 exploit_forti.py 192.168.1.1:8443
python3 exploit_forti.py https://192.168.1.1:8443
```

# smapel of results : 
<img width="1355" height="622" alt="image" src="https://github.com/user-attachments/assets/716223e8-2290-4387-9d5f-b32bcd908992" />

tel : https://t.me/GOTOCVE

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →