---
id: CVE-2025-52970
title: >-
  A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0
  through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10,
  FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker
  with non-pu…
summary: >-
  A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0
  through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10,
  FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker
  with non-pu…
severity: high
cvss: 7.7
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C'
cvssSource: cna
cwe:
  - CWE-233
vendor: Fortinet
product: FortiWeb
affected:
  - FortiWeb >= 7.6.0 <= 7.6.3
  - FortiWeb >= 7.4.0 <= 7.4.7
  - FortiWeb >= 7.2.0 <= 7.2.10
  - FortiWeb >= 7.0.0 <= 7.0.10
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-08-18T12:41:47.892664Z'
exploitAvailable: true
published: '2025-08-12'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T10:44:11.069Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-52970'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-448'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-448'
tags:
  - cve.org
  - exploit-available
epss: 0.10129
epssPercentile: 0.95671
exploits:
  github: 3
  githubRepos:
    - 'https://github.com/Hex00-0x4/FortiWeb-CVE-2025-52970-Authentication-Bypass'
    - 'https://github.com/34zY/CVE-2025-52970'
    - 'https://github.com/imbas007/POC-CVE-2025-52970'
  nuclei:
    - CVE-2025-52970
  checkedAt: '2026-11-06T16:44:52.435Z'
ingestedAt: '2026-11-06T10:49:35.343Z'
---

## Overview

A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, FortiWeb 7.2.0 through 7.2.10, FortiWeb 7.0.0 through 7.0.10 may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.

## Affected

- `FortiWeb >= 7.6.0 <= 7.6.3`
- `FortiWeb >= 7.4.0 <= 7.4.7`
- `FortiWeb >= 7.2.0 <= 7.2.10`
- `FortiWeb >= 7.0.0 <= 7.0.10`

## Remediation

Upgrade to FortiWeb version 8.0.0 or above
Upgrade to FortiWeb version 7.6.4 or above
Upgrade to FortiWeb version 7.4.8 or above
Upgrade to FortiWeb version 7.2.11 or above
Upgrade to FortiWeb version 7.0.11 or above