As a logged in administrator, we can successfully trigger the authenticated command injection vulnerability and execute a netcat reverse shell with root priviledges.
Affected versions:
FortiWeb 8.0.0 through 8.0.1,
FortiWeb 7.6.0 through 7.6.5,
FortiWeb 7.4.0 through 7.4.10,
FortiWeb 7.2.0 through 7.2.11,
FortiWeb 7.0.0 through 7.0.11
P.S. The auth bypass vulnerability (CVE-2025-64446) can be used to create a new local administrator account, making chaining CVE-2025-64446 + CVE-2025-58034 equivalent to unauthenticated RCE.