Class familyFortinet · FortiWeb
Fortinet FortiWeb OS command injection flaws, 2023–2026
11 FortiWeb CVEs with CWE-78 weaknesses, 16 Feb 2023 to 10 Mar 2026. 1 is in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
5 2023’23
2024’24
5 2025’25
1 2026’26
In CISA KEVNot in KEV
20235 CVEs
20255 CVEs, 1 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2022-30303 | 16 Feb 2023 | An improper neutralization of special elements used in an os command ('OS Command Injection') [CWE-78] in FortiWeb… | Grouped by weakness | 23.0 |
| CVE-2023-23779 | 16 Feb 2023 | Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities… | Grouped by weakness | 18.8 |
| CVE-2022-39951 | 7 Mar 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb… | Grouped by weakness | 20.4 |
| CVE-2022-43948 | 11 Apr 2023 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb… | Grouped by weakness | 14.3 |
| CVE-2023-23777 | 11 Jul 2023 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… | Grouped by weakness | 19.2 |
| CVE-2024-50567 | 11 Feb 2025 | An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb… | Grouped by weakness | 21.3 |
| CVE-2024-50569 | 11 Feb 2025 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb… | Grouped by weakness | 20.1 |
| CVE-2025-27759 | 12 Aug 2025 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]… | Grouped by weakness | 12.5 |
| CVE-2025-47857 | 12 Aug 2025 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in… | Grouped by weakness | 12.9 |
| CVE-2025-58034KEV | 18 Nov 2025 | Fortinet FortiWeb OS Command Injection Vulnerability | Grouped by weakness | 72.8 |
| CVE-2025-66178 | 10 Mar 2026 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet… | Grouped by weakness | 20.2 |