CVE-2025-59669 — Hard-coded Credentials in Fortinet Fortiweb

CWE-798 — Hard-coded Credentials4 documents4 sources
Severity
5.5MEDIUMNVD
CNA5.3
EPSS
0.0%
top 97.07%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Fortinet Fortiweb
Timeline
PublishedNov 18

Description

A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow an authenticated attacker with shell access to the device to connect to redis service and access its data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDfortinet/fortiweb7.0.0 — 7.6.1
▶CVEListV5fortinet/fortiweb7.4.0 — 7.4.11+3

🔴Vulnerability Details

2
GHSA
GHSA-r5ph-gxvr-rv3j: A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7↗2025-11-18
▶
CVEList
CVE-2025-59669: A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7↗2025-11-18
▶

📋Vendor Advisories

1
Fortinet
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all ve...↗2025-11-18
▶
CVE-2025-59669 — Hard-coded Credentials in Fortinet | cvebase