Admin-Account-Creation

FortiWeb `cgi-bin/fwbcgi` Path Traversal Authentication Bypass Leading to Rogue Admin Creation (CVE-2025-64446) new KEV EPSS 92%CVE-2025-64446networkCRITICAL 9.8Unverified2026-07-06AI Engine WordPress Plugin Unauthenticated MCP Token Disclosure to Admin Account Creation (CVE-2025-11749) new EPSS 75%CVE-2025-11749webCRITICAL 9.8Unverified2026-07-06ACF Extended (ACFE) `prepare_form()` Unauthenticated RCE via Privilege Escalation (CVE-2025-13486) new EPSS 68%CVE-2025-13486webCRITICAL 9.8Unverified2026-07-06