CVE Tools
Track your stack

When The Impersonation Function Gets Used To Impersonate Users (Fortinet FortiWeb Auth. Bypass CVE-2025-64446)

watchTowr LabsBy Sina Kheirkhah (@SinSinology)

Reported exploitedFortiWeb
Read at watchTowr Labs

watchTowr Labs publishes this story on its own site; we link to it rather than reprint it.

  1. Хакер (xakep.ru)Малварь ChocoPoC распространяется под видом фальшивых эксплоитовCVE-2025-64446
  2. The Hacker NewsNew ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit ReposCVE-2025-64446
  3. BleepingComputerChocoPoc malware delivered via trojanized exploits on GitHubCVE-2025-64446
  4. BleepingComputerNew ChocoPoC malware targets researchers via trojanized PoC exploitsCVE-2025-64446

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store