FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User

A critical authentication bypass vulnerability in FortiWeb allows unauthenticated remote attackers to impersonate any existing user on affected systems.  The vulnerability, tracked as CVE-2025-52970 with a CVSS score of 7.7, affects multiple FortiWeb versions and stems from improper parameter handling in the cookie parsing mechanism. Key Takeaways1. CVE-2025-52970 lets attackers bypass authentication to log in […]

The post FortiWeb Authentication Bypass Vulnerability Let Attackers Log in As Any Existing User appeared first on Cyber Security News.

This article has been indexed from Cyber Security News

Read the original article: