Use of Hard-Coded Credentials in Fortinet FortiWeb Solutions

CVE-2025-59669

What is CVE-2025-59669?

A vulnerability exists in various versions of Fortinet's FortiWeb product where hard-coded credentials are used. This issue allows an authenticated attacker with shell access to connect to the Redis service, potentially leading to unauthorized data access. Organizations should take immediate steps to update their FortiWeb deployments and review access controls to mitigate risks associated with this vulnerability.

References