{"schema":"vulnpedia.poc/1","cve":"CVE-2025-25257","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2025-07-18","ransomware":false},"epss":{"score":0.99921,"percentile":0.99969},"cvss":{"version":"3.1","score":9.6,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:X/RC:C"},"has_public_poc":true,"poc_sources":[{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d688fc77d00e","executable":false,"sourceId":"d688fc77d00e","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d688fc77d00e","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/d688fc77d00e"}],"repositoryUrl":"https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7790d175f3a0","executable":false,"sourceId":"7790d175f3a0","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7790d175f3a0","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/7790d175f3a0"}],"repositoryUrl":"https://github.com/0xbigshaq/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/3723362eecdc","executable":false,"sourceId":"3723362eecdc","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"3723362eecdc","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/3723362eecdc"}],"repositoryUrl":"https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/f23ee9358510","executable":false,"sourceId":"f23ee9358510","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f23ee9358510","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/f23ee9358510"}],"repositoryUrl":"https://github.com/mtjanus106/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/273941969e28","executable":false,"sourceId":"273941969e28","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"273941969e28","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/273941969e28"}],"repositoryUrl":"https://github.com/B1ack4sh/Blackash-CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7a2557fc2f73","executable":false,"sourceId":"7a2557fc2f73","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7a2557fc2f73","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/7a2557fc2f73"}],"repositoryUrl":"https://github.com/0xgh057r3c0n/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/473881a780ec","executable":false,"sourceId":"473881a780ec","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"473881a780ec","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/473881a780ec"}],"repositoryUrl":"https://github.com/TheStingR/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/ec7c6d77c99d","executable":false,"sourceId":"ec7c6d77c99d","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"ec7c6d77c99d","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/ec7c6d77c99d"}],"repositoryUrl":"https://github.com/mrmtwoj/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/35a9d869b266","executable":false,"sourceId":"35a9d869b266","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"35a9d869b266","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/35a9d869b266"}],"repositoryUrl":"https://github.com/segfault-it/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/4bc99adfe77a","executable":false,"sourceId":"4bc99adfe77a","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"4bc99adfe77a","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/4bc99adfe77a"}],"repositoryUrl":"https://github.com/kityzed2003/CVE-2025-25257"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/85aaeec7fc2e","executable":false,"sourceId":"85aaeec7fc2e","verification":"catalogued","source":"vulncheck-kev","modified":"2025-07-11T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"85aaeec7fc2e","modified":"2025-07-11T00:00:00Z","url":"https://vulncheck.com/xdb/85aaeec7fc2e"}],"repositoryUrl":"https://github.com/mr-r3b00t/CVE-2025-25257"},{"kind":"exploitdb","id":"52473","url":"https://www.exploit-db.com/exploits/52473","code":"https://www.exploit-db.com/download/52473","executable":true}],"poc_candidates":[{"url":"https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-09-25T12:05:20Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-09-25T12:05:20Z","url":"https://github.com/watchtowrlabs/watchTowr-vs-FortiWeb-CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/0xbigshaq/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"FortiWeb CVE-2025-25257 exploit","modified":"2026-02-28T08:41:11Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/0xbigshaq/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-02-28T08:41:11Z","url":"https://github.com/0xbigshaq/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/aitorfirm/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"Exploiting the CVE-2025-25257 vulnerability in FortiWeb. This repository demonstrates secure pre-authenticated SQL injection.","modified":"2025-10-11T23:56:24Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/aitorfirm/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-10-11T23:56:24Z","url":"https://github.com/aitorfirm/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"Tool for detecting and exploiting CVE-2025-25257 in Fortinet FortiWeb.","modified":"2025-07-12T15:05:17Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-07-12T15:05:17Z","url":"https://github.com/adilburaksen/CVE-2025-25257-Exploit-Tool"}],"tags":[]},{"url":"https://github.com/imbas007/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-09-24T18:54:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/imbas007/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-09-24T18:54:41Z","url":"https://github.com/imbas007/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/0xgh057r3c0n/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"PoC for CVE-2025-25257, a critical unauthenticated SQL injection in FortiWeb. Exploits SQLi via the Authorization header to write a webshell and gain RCE. No login required. Fully automated.","modified":"2026-10-11T17:41:19Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/0xgh057r3c0n/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-10-11T17:41:19Z","url":"https://github.com/0xgh057r3c0n/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/mrmtwoj/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"CVE‑2025‑25257 is a critical pre-authentication SQL injection vulnerability affecting Fortinet FortiWeb’s","modified":"2026-05-18T02:44:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/mrmtwoj/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-05-18T02:44:04Z","url":"https://github.com/mrmtwoj/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/TheStingR/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"Public PoC for CVE-2025-25257: FortiWeb pre-auth SQLi to RCE","modified":"2026-01-26T15:29:35Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/TheStingR/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-01-26T15:29:35Z","url":"https://github.com/TheStingR/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/segfault-it/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"A working (at least for me :] ) exploit for CVE-2025-25257","modified":"2026-04-29T05:23:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/segfault-it/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-04-29T05:23:14Z","url":"https://github.com/segfault-it/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/mr-r3b00t/CVE-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"CVE-2025-25257 PoC for educational use and/or authorised pentesting.","modified":"2026-01-13T11:21:15Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/mr-r3b00t/CVE-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-01-13T11:21:15Z","url":"https://github.com/mr-r3b00t/CVE-2025-25257"}],"tags":[]},{"url":"https://github.com/lytianahkone-boop/cve-2025-25257","source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-12-16T18:24:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/lytianahkone-boop/cve-2025-25257"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2025-12-16T18:24:53Z","url":"https://github.com/lytianahkone-boop/cve-2025-25257"}],"tags":[]},{"url":"https://github.com/GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection","source":"poc-in-github","sourceId":"CVE-2025-25257","description":"This repository provides production-ready detection engineering content for **CVE-2025-25257**, a pre-authentication SQL Injection vulnerability in Fortinet FortiWeb Fabric Connector versions 7.0 through 7.6.x. Successful exploitation can lead to Remote Code Execution without any prior authentication.","modified":"2026-03-01T21:03:59Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2025-25257","url":"https://github.com/GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection"},{"source":"poc-in-github","sourceId":"CVE-2025-25257","modified":"2026-03-01T21:03:59Z","url":"https://github.com/GarethMSheldon/Fortinet-FortiWeb-Fabric-Connector-CVE-2025-25257-Detection"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2025-25257 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"searchsploit","cmd":"searchsploit --cve CVE-2025-25257 && searchsploit -m 52473","note":"Fetch the ExploitDB PoC locally; review the code before running it."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2025-25257/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-25257.yaml","template":"http/cves/2025/CVE-2025-25257.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2025-25257%22&type=repositories","executable":false}]}