CVE-2025-53609

No fix known EPSS 11%CVSS 4.7

A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7.0.11 may allow an authenticated attacker to perform an arbitrary file read on the underlying system via crafted requests.

Published 2025-09-09 · CVE record · OSV

Products: Fortinet FortiWeb