--- title: "Security digest: November 14, 2025" url: https://erroneo.us/security/2025-11-14/ description: "November 14, 2025 vulnerability digest: 1 brief (FortiWeb CVE-2025-64446: Exploited…); 1 CISA KEV addition (Fortinet); 1 critical advisory (PyPI). What to…" type: security-digest-day section: "Security Digest" date_published: 2025-11-14 date_modified: 2026-10-21 publisher: erroneo.us author: erroneo.us Security Desk license: All rights reserved. Quote with attribution and a link. --- # Security digest: November 14, 2025 1 editorial brief, 1 known exploited (cisa kev) addition and 1 critical advisory. ## Take stock - Act now: FortiWeb CVE-2025-64446: Exploited Unauthenticated Takeover . Operators of FortiWeb 7.0 through 8.0.1 (and unsupported 6.x) appliances, especially with HTTP/HTTPS management exposed. - Do you run any of these? Fortinet FortiWeb. They are being exploited in the wild (CISA KEV). Patch or mitigate if you do; CISA’s federal deadline is 2025-11-21. - PyPI: 1 critical advisory ( astrbot ). Check with pip-audit (or: pip show ) . - None of it touches your stack? Then there is nothing to do today. That is a result, not a failure to read carefully. ## Editorial briefs - **Act now** [FortiWeb CVE-2025-64446: Exploited Unauthenticated Takeover](https://erroneo.us/security/briefs/fortiweb-cve-2025-64446-path-traversal/index.md): Any FortiWeb still below the fixed builds with its web GUI reachable from the internet should be presumed compromised and rebuilt, not just patched. ## Known exploited (CISA KEV) - [CVE-2025-64446](https://erroneo.us/security/cve/CVE-2025-64446/index.md) Fortinet FortiWeb: Fortinet FortiWeb Path Traversal Vulnerability (CISA due 2025-11-21) ## Critical advisories - [CVE-2025-55449](https://erroneo.us/security/cve/CVE-2025-55449/index.md) AstrBot is vulnerable to RCE with hard-coded JWT signing keys — PyPI astrbot < 3.5.18 → 3.5.18 --- Source page: https://erroneo.us/security/2025-11-14/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt