CISA Orders Government Agencies to Patch New Fortinet Vulnerability Within 7 Days

[johny899]

Have you seen a security warning and thought, “Ohh, this isn’t good?” Well, that is exactly what has just happened. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) directed government agencies to mitigate a new Fortinet FortiWeb vulnerability within 7 days. 7 days to fix a vulnerability that hackers are already attempting to exploit. Let’s hang out and have a discussion about all of this!

Why The Urgency?​

The vulnerability, referred to as CVE-2025-58034, is an OS command injection vulnerability. This means attackers can execute code on the system without any user interaction. Kind of like someone sneaking into your home, through a door you didn’t know was there, right?

CISA is no joke. They placed this vulnerability on their Known Exploited Vulnerabilities list and have directed that agencies must remediate that vulnerability in order to comply with Binding Operational Directive 22-01. Vulnerabilities of this nature are often used by cybercriminals, and can causes great damages if not patched quickly.

Why This is Worse​

This is not the first time we have seen some severe vulnerabilities with Fortinet gear. Just a month ago, Fortinet patched another FortiWeb vulnerability which was referred to as CVE-2025-64446, and hackers were already actively exploiting to compromise their targets. Then we saw something similar in August, when Fortinet patched a vulnerability CVE-2023-38628 in FortiSIEM after hackers were attempting to brute force their way through Fortinet SSL VPNs.

Fortinet devices are prevalent, which means they are a common target of attacks.

Why Agencies Should Act Quickly​

These vulnerabilities may be leveraged in hacking attacks and ransomware. Remember Volt Typhoon? In that attack, hackers used Fortinet SSL VPN vulnerabilities to gain access to the Dutch Ministry of Defence network and to deploy a custom Internet of Things malware named Coathanger. If a threat actor uses the same approach on U.S. networks and systems, it could be severely catastrophic.

So CISA did a good thing in allocating seven days to patch. Time is critical for agencies to patch, audit, and secure their systems.

How to Remain Safe​

If you operate devices using Fortinet FortiWeb, here are some suggestions:

• Update your software/firmware immediately
• Review your logs for unusual activity
• Segment networks to limit damage in case of an incident
• Monitor CISA updates closely

To Sum Up​

CISA is clearly showing that hackers and cyber attacks will not wait. Seven days may sound like a short window, however depending on the agency's ability to audit, patch and secure the vulnerabilities, it may be just enough time. If you run the systems with Fortinet devices, please take this seriously, audit, patch, and secure everything. It's much better to be proactive than to deal with an incident, I assure you.