Back to the CVE list
CVE-2025-25257 CISA KEV · Actively exploited

Fortinet FortiWeb SQL Injection Vulnerability

CVSS score

—

EPSS probability

%99.9

Risk score

—

Published

1 y ago

Related Security News

Articles and analysis bulletins in which the press and security publications have covered this vulnerability:

The Hacker News15.10.2026

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks

The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enabled documents, PS2EXE downloaders, GitHub-hosted PowerShell, and crafted WinRAR archives

Cisco Talos14.10.2026

Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizations

Talos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy.

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-25257"