CVE-2025-64446Vulnerability

1. “Attempt to exploit these devices via known vulnerabilities like CVE-2025-64446 (a path traversal flaw in FortiWeb) and CVE-2026-0257 (an authentication bypass flaw in Palo Alto Networks PAN-OS and Prisma Access) through bespoke Python scripts named "fortnew.py" and "exploit_2026_…”

   The Hacker NewsNews23 Oct 2026
   Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials

2. “…ipt is self-named ‘FortiGate Security Scanner’ (with the filename ‘fort.py and ‘fortnew.py’) and is used by the operators to exploit CVE-2025-64446 (for FortiWeb services) as well as brute-forcing (as a fall-back method) exposed Fortinet devices.”

   Group-IBVendor21 Oct 2026
   Stray Cat, Open Doors: How k0t Wanders Through the Network Edge

3. “When a critical vulnerability affects a large attack surface - such as React2Shell (CVE-2025-55182), FortiWeb (CVE-2025-64446), or Ivanti Sentry (CVE-2026-10520) - every hour counts to produce a scan module before attackers weaponise and mass-exploit the vulnerability.”

   Sekoia.ioVendor30 Jun 2026
   Don't Eat the ChocoPoCs: Trojanised PoCs Hit Researchers

• hxxps://github[.]com/ogenich/CVE-2026-48908in 1 report
• hxxps://api.mapbox[.]com/datasets/v1/frankley/cmor0tcxf008i1mmpd7apt903/features/dm370543acmdopk296nahbtuain 1 report
• student.uin-suka.ac[.]idin 1 report
• ogrenci.ibu.edu[.]trin 1 report
• pepy[.]techin 1 report
• pypistats[.]orgin 1 report
• 93739477cd379ade…856fa111dd06in 1 report
• 17997e9e0256d0f5…822b24aa76b4in 1 report
• 5abd45d6f4a1705d…a35c23de5caein 1 report
• 40569318e89db751…a28129ca36bcin 1 report
• 320b29844892e3c5…9e294ec6d43ein 1 report
• hxxps://github[.]com/lincemorado97/CVE-2025-64446_CVE-2025-58034in 1 report

Also named with it: CVE-2026-0257, CVE-2025-55182, CVE-2026-48908, CVE-2026-10520, CVE-2026-50751, CVE-2025-14847