Fortinet

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

• 5.4MediumOct 16, 2026Fortinet Multiple Products Path traversal / file handlingCVE-2025-61624Affected: Fortinet FortiGate, FortiWeb, and FortiAnalyzer appliances running affected versions. Attacker gains: Ability to read and write arbitrary files, potentially leading to sensitive data exposure or system compromise. Recommended action: Apply the latest security patches from Fortinet to affected appliances as soon as possible.Added to KEV Oct 16, 2026Exploited1.1% likely
• 9.8CriticalOct 1, 2026Fortinet FortiMail Path traversal / file handlingCVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all versions may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.Added to KEV Oct 1, 2026 · same day as publicationExploited2.2% likely
• 7.4HighSep 9, 2026Fortinet Multiple Products Memory corruptionCVE-2025-25249Affected: Fortinet FortiGate, FortiAuthenticator, FortiAnalyzer, FortiManager, and FortiSwitch. Attacker gains: Remote code execution and denial-of-service capabilities. Recommended action: Apply the latest patches and update the affected Fortinet products to the recommended versions.Added to KEV Sep 9, 2026Exploited3.8% likely
• 5.3MediumJul 27, 2026Fortinet FortiOS Information disclosureCVE-2025-68686Affected: Fortinet FortiOS versions prior to 7.2.8 and 7.4.0. Attacker gains: Unauthorized access to sensitive information, including configuration and authentication data. Recommended action: Update FortiOS to version 7.2.8 or 7.4.0 and ensure all patches are applied.Added to KEV Jul 27, 2026Exploited29% likely
• 9.1CriticalJul 16, 2026Fortinet FortiSandbox Code / command injectionCVE-2026-39808Fortinet FortiSandbox appliance. An attacker gains arbitrary system command execution and remote code execution. Patch the Fortinet FortiSandbox appliance with the latest available version.Added to KEV Jul 16, 2026Exploited93% likelyExploit codeNucleiDetection
• 9.1CriticalJul 16, 2026Fortinet FortiSandbox Code / command injectionCVE-2026-25089Fortinet FortiSandbox appliance is affected. An attacker gains remote code execution and full control of the appliance. Patch the FortiSandbox appliance to the latest version as soon as possible.Added to KEV Jul 16, 2026Exploited76% likely
• 9.1CriticalApr 13, 2026Fortinet FortiClient EMS SQL injectionCVE-2026-21643(1) Fortinet FortiClient EMS is affected. (2) An attacker gains unauthorized access to sensitive data and administrative privileges. (3) Update FortiClient EMS to the latest version available.Added to KEV Apr 13, 2026Exploited98% likelyExploit codeNucleiDetection
• 9.1CriticalApr 6, 2026Fortinet FortiClient EMS Auth bypass / access controlCVE-2026-35616Fortinet FortiClient EMS is affected. An attacker gains unauthorized access to sensitive data and can perform arbitrary actions. Apply the Fortinet FortiClient EMS patch (FortiOS 7.4.2 or later) to mitigate this vulnerability.Added to KEV Apr 6, 2026Exploited94% likelyExploit codeNucleiDetection
• 9.4CriticalJan 27, 2026Fortinet Multiple Products Auth bypass / access controlCVE-2026-24858Affected: Fortinet FortiGate, FortiAuthenticator, and FortiToken devices. Attacker gains: Unauthorized access to administrative interfaces and sensitive data. Recommended action: Apply Fortinet's FortiOS 7.2.3 and FortiAuthenticator 7.0.3 patches as soon as possible.Added to KEV Jan 27, 2026Exploited86% likelyExploit code
• 9.1CriticalDec 16, 2025Fortinet Multiple Products Crypto / certificateCVE-2025-59718Affected: Fortinet FortiGate, FortiManager, FortiAnalyzer, and FortiOS. Attacker gains: Remote code execution and unauthorized access to sensitive data. Recommended action: Immediately update all affected Fortinet products to the latest version.Added to KEV Dec 16, 2025Exploited68% likelyExploit code
• 6.7MediumNov 18, 2025Fortinet FortiWeb Code / command injectionCVE-2025-58034Affected: Fortinet FortiWeb appliance's web-based management interface. Attacker gains: Remote code execution, potentially leading to full system compromise. Recommended action: Apply Fortinet's FortiWeb 7.0.7 and later patches, or upgrade to FortiWeb 8.1.0 and later versions.Added to KEV Nov 18, 2025Exploited55% likelyExploit codeMetasploitDetection
• 9.4CriticalNov 14, 2025Fortinet FortiWeb Path traversal / file handlingCVE-2025-64446Fortinet FortiWeb devices are affected. An attacker gains unauthorized access to sensitive files and directories. Patch the FortiWeb device with the latest version of FortiOS.Added to KEV Nov 14, 2025Exploited92% likelyExploit codeExploit-DB · Metasploit · NucleiDetection
• 9.6CriticalJul 17, 2025Fortinet FortiWeb SQL injectionCVE-2025-25257Affected: Fortinet FortiWeb web application firewall versions 6.4.0 to 6.4.7, 6.2.0 to 6.2.8, and 6.0.0 to 6.0.11. Attacker gains: Unauthorized access to sensitive data and system compromise. Recommended action: Update to the latest FortiWeb version 6.4.8 or later.Added to KEV Jul 18, 2025 · same day as publicationExploited100% likelyExploit codeExploit-DB · NucleiDetection
• 6.5MediumNov 21, 2019Fortinet FortiOS Auth bypass / access controlCVE-2019-6693(1) Fortinet FortiOS devices. (2) An attacker gains access to the device with administrative privileges. (3) Update to FortiOS 6.2.6 or later.Added to KEV Jun 25, 2025 · 2,042 days after publicationExploited6.6% likely
• 9.6CriticalMay 13, 2025Fortinet Multiple Products Memory corruptionCVE-2025-32756Affected: Multiple Fortinet products including FortiGate, FortiManager, and FortiAnalyzer. Attacker gains: Remote code execution, potentially allowing an attacker to gain administrative access to the affected system. Recommended action: Apply the available Fortinet patches and ensure that all products are running the latest firmware version.Added to KEV May 14, 2025 · same day as publicationExploited31% likelyDetection
• 8.1HighFeb 11, 2025Fortinet FortiOS and FortiProxy Auth bypass / access controlCVE-2025-24472Affected: Fortinet FortiOS and FortiProxy systems. Attacker gains: Ability to bypass authentication and access unauthorized network resources. Recommended action: Update FortiOS and FortiProxy to the latest version available and apply the recommended security patches.Added to KEV Mar 18, 2025 · 34 days after publicationExploited7.2% likely
• 9.6CriticalJan 14, 2025Fortinet FortiOS and FortiProxy Auth bypass / access controlCVE-2024-55591Fortinet FortiOS and FortiProxy. An attacker gains unauthorized access to administrative interfaces. Patch FortiOS and FortiProxy to version 7.4.1 or later.Added to KEV Jan 14, 2025 · same day as publicationExploited94% likelyExploit codeNucleiDetection
• 9.8CriticalOct 23, 2024Fortinet FortiManager Auth bypass / access controlCVE-2024-47575Fortinet FortiManager appliance is affected. An attacker gains remote code execution and administrative access. Patch FortiManager to the latest version and ensure regular updates.Added to KEV Oct 23, 2024 · same day as publicationExploited95% likelyExploit codeMetasploitDetection
• 9.8CriticalFeb 15, 2024Fortinet Multiple ProductsCVE-2024-23113Affected: Fortinet FortiGate, FortiWeb, and FortiAnalyzer products running affected software versions. Attacker gains: Remote code execution, allowing the attacker to execute arbitrary code on the target system. Recommended action: Apply the latest patches or upgrade to the latest software versions to mitigate the vulnerability.Added to KEV Oct 9, 2024 · 236 days after publicationExploited62% likelyDetection
• 9.3CriticalMar 12, 2024Fortinet FortiClient EMS SQL injectionCVE-2023-48788Fortinet FortiClient EMS is affected. An attacker gains unauthorized access to sensitive data and system control. Update Fortinet FortiClient EMS to the latest version and apply recommended security patches.Added to KEV Mar 25, 2024 · 12 days after publicationExploited98% likelyExploit codeMetasploit · NucleiDetection
• 9.6CriticalFeb 9, 2024Fortinet FortiOS Memory corruptionCVE-2024-21762Fortinet FortiOS. An attacker gains arbitrary code execution. Update FortiOS to the latest version and apply patches.Added to KEV Feb 9, 2024 · same day as publicationExploited85% likelyDetection
• 9.2CriticalJun 13, 2023Fortinet FortiOS and FortiProxy SSL-VPN Memory corruptionCVE-2023-27997Affected: Fortinet FortiOS and FortiProxy SSL-VPN. Attacker gains: Remote code execution and full control of the system. Recommended action: Immediately update FortiOS and FortiProxy to the latest version.Added to KEV Jun 13, 2023 · same day as publicationExploited86% likelyExploit codeDetection
• 6.5MediumMar 7, 2023Fortinet FortiOS Path traversal / file handlingCVE-2022-41328Affected: Fortinet FortiOS versions 6.4.0 to 7.2.0. Attacker gains: Ability to read arbitrary files on the system. Recommended action: Update to a patched version of FortiOS.Added to KEV Mar 14, 2023 · 6 days after publicationExploited11% likely
• 9.3CriticalJan 2, 2023Fortinet FortiOS Memory corruptionCVE-2022-42475Fortinet FortiOS is affected, An attacker gains arbitrary code execution, Patch FortiOS to version 7.2.7 or later.Added to KEV Dec 13, 2022 · same day as publicationExploited99% likelyExploit codeDetection
• 9.8CriticalOct 18, 2022Fortinet Multiple Products Auth bypass / access controlCVE-2022-40684Fortinet FortiGate, FortiWeb, and FortiAuth2 devices. An attacker gains unauthorized access to administrative interfaces. Patch Fortinet products with the latest available updates.Added to KEV Oct 11, 2022 · same day as publicationExploited100% likelyExploit codeExploit-DB · Metasploit · NucleiDetection

Recent

• 7.5HighOct 27, 2026Fortinet FortiOS Denial of serviceCVE-2026-106174A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.
• 9.8CriticalOct 26, 2026Fortinet FortiSandbox Auth bypass / access controlCVE-2026-107656An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions, FortiSandbox PaaS 4.2 all versions may allow attacker to execute unauthorized code or commands via crafted HTTP requests
• –UnscoredOct 23, 2026FortinetADV-cccs-99f02180dcedSerial number: AV26-1081 Date: October 23, 2026 As of October 21, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer 8.0 Versions prior to 8.0.2 FortiAnalyzer 7.6 Versions prior to 7.6.8 FortiAnalyzer 7.4 Versions prior to 7.4.12 FortiAnalyzer 7.2 Versions prior to 7.2.13 FortiAuthenticator 8.0 Versions prior to 8.0.4 FortiAuthenticator 6.6 Versions prior to 6.6.11 FortiMail 8.0 Versions prior to 8.0.2 FortiMail 7.6 Versions prior to 7.6.7 FortiMail 7.4 Versio
• 5.4MediumOct 16, 2026Fortinet Multiple Products Path traversal / file handlingCVE-2025-61624Affected: Fortinet FortiGate, FortiWeb, and FortiAnalyzer appliances running affected versions. Attacker gains: Ability to read and write arbitrary files, potentially leading to sensitive data exposure or system compromise. Recommended action: Apply the latest security patches from Fortinet to affected appliances as soon as possible.Exploited1.1% likely
• –UnscoredOct 13, 2026FortinetADV-cccs-0b73a6530ea3Serial Number: AV26-1037 Date: October 13, 2026 As of October 13, 2026, Fortinet is affected by vulnerabilities in the following products: FortiAnalyzer Prior to 7.6.5 Prior to 7.4.8 Prior to 7.6.5 FortiAnalyzer Cloud Prior to 7.6.5 Prior to 7.4.8 Prior to 7.2.12 FortiManager Prior to 7.6.5 Prior to 7.4.7 FortiManager Cloud Prior to 7.6.5 FortiMail Prior to 7.6.4 Prior to 7.4.6 Prior to 7.2.9 FortiSIEM Prior to 7.5.1 FortiSandbox Prior to 4.4.10 Prior to 5.0.7 FortiSandbox PaaS 4.4 all versions
• 7.2HighOct 13, 2026Fortinet FortiAnalyzer SQL injectionCVE-2026-23705An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.13, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.
• 2.3LowOct 13, 2026Fortinet FortiOS Memory corruptionCVE-2026-106175A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.
• 9.4CriticalOct 13, 2026Fortinet FortiSIEM Path traversal / file handlingCVE-2026-106173Affected: Fortinet FortiSIEM 7.5.0. An attacker gains: Remote code execution and unauthorized system access. Recommended action: Immediately update to the latest version of Fortinet FortiSIEM or apply the relevant patch.Detection
• –UnscoredOct 13, 2026Fortinet Path traversal / file handlingADV-fortinet-204c2ed5dd02CVSSv3 Score: 9.4 An Improper limitation of a pathname to a restricted directory ('path traversal') [CWE-22] in FortiSIEM may allow an unauthenticated attacker to execute unauthorized code or commands via specially crafted packets. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026FortinetADV-fortinet-716322ff36a0CVSSv3 Score: 3.4 A missing authorization vulnerability [CWE-862] in FortiSIEM GUI may allow an authenticated attacker to execute unauthorized code or commands via Specially crafted HTTP requests Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Memory corruptionADV-fortinet-97d88dc8ed1eCVSSv3 Score: 2.1 A Double Free vulnerability [CWE-415] in FortiOS, FortiProxy and FortiSwitch may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Auth bypass / access controlADV-fortinet-0d32f8c8a739CVSSv3 Score: 4.9 A Use of Hard-coded Cryptographic Key [CWE-321] in FortiSandbox and FortiSandbox Cloud API may allow an unauthenticated attacker to access some endpoints via specially crafted HTTP requests Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Denial of serviceADV-fortinet-f3c0bfee9527CVSSv3 Score: 6.7 An Improper Locking vulnerability [CWE-667] in FortiOS may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Auth bypass / access controlADV-fortinet-5536a304ec57CVSSv3 Score: 9.6 An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiSandbox GUI may allow a remote unauthenticated attacker to bypass authentication via crafted HTTP requests. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet SQL injectionADV-fortinet-8f79d056b397CVSSv3 Score: 7.9 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Denial of serviceADV-fortinet-6d8857ef3a1aCVSSv3 Score: 4.8 An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026Fortinet Code / command injectionADV-fortinet-04610ccaed3cCVSSv3 Score: 7.7 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. Revised on 2026-10-13 00:00:00
• –UnscoredOct 13, 2026FortinetADV-fortinet-9294b3a0cae3CVSSv3 Score: 5.3 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially crafted packets. Impersonation of a Fortimanager cluster node requires possessing the node's certificate and private key. Revised on 2026-10-13 00:00:00
• 9.8CriticalOct 1, 2026Fortinet FortiMail Path traversal / file handlingCVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9, FortiMail 7.0 all versions may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.Exploited2.2% likely
• –UnscoredOct 1, 2026FortinetADV-fortinet-72eff011d9faCVSSv3 Score: 9.8 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] and Improper Neutralization of NULL Byte or NULL Character [CWE-158] vulnerability may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests.This has been reported to be exploited in the wild, customers are urged to apply the workaround below. Revised on 2026-10-07 00:00:00
• 7.4HighSep 9, 2026Fortinet Multiple Products Memory corruptionCVE-2025-25249Affected: Fortinet FortiGate, FortiAuthenticator, FortiAnalyzer, FortiManager, and FortiSwitch. Attacker gains: Remote code execution and denial-of-service capabilities. Recommended action: Apply the latest patches and update the affected Fortinet products to the recommended versions.Exploited3.8% likely
• 2.7LowSep 8, 2026Fortinet FortiOS Memory corruptionCVE-2026-84392A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions,1.1% likely
• 7.2HighSep 8, 2026Fortinet FortiSandbox Code / command injectionCVE-2026-84387An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests.1.4% likely
• –UnscoredSep 8, 2026FortinetADV-fortinet-587f4c8e6c99CVSSv3 Score: 5.1 An Unverified Ownership Vulnerability [CWE-283] in FortiClient Windows fortimon3 driver may allow an authenticated attacker to terminate arbitrary processes via an exposed minifilter communication port. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Auth bypass / access controlADV-fortinet-66396556dde8CVSSv3 Score: 5.4 An Improper Access control vulnerability [CWE-284] in FortiSOAR may allow an authenticated attacker with zero permissions to subscribe to websocket streams and topics and to inject broadcast messages to the stream via crafted websocket requests Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026FortinetADV-fortinet-426a8abb1f42CVSSv3 Score: 7.2 An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] in FortiSandbox may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Auth bypass / access controlADV-fortinet-769beda9a8d1CVSSv3 Score: 9.6 An improper authentication vulnerability [CWE-287] in the Fortinet Privileged Access Agent Chrome Extension may allow a remote unauthenticated attacker to proxy a user's browser traffic through attacker controlled servers if the user visits a malicious website. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026FortinetADV-fortinet-4b99e77726acCVSSv3 Score: 9.8 An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Memory corruptionADV-fortinet-09bd5f4b191fCVSSv3 Score: 2.7 A NULL Pointer Dereference vulnerability [CWE-476] in FortiOS, FortiProxy and FortiPAM may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026FortinetADV-fortinet-acfafefcdcb5CVSSv3 Score: 3.1 An URL redirection to untrusted site ('open redirect') [CWE-601] vulnerability in FortiSIEM may allow an authenticated attacker to cause a redirection to any website via specially crafted HTTP requests Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Information disclosureADV-fortinet-f6e8c3105471CVSSv3 Score: 9.9 An improper access control vulnerability [CWE-284] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Denial of serviceADV-fortinet-5d97d333ae75CVSSv3 Score: 6.5 A Use of Uninitialized Variable [CWE-457] vulnerability in Fortinet FortiAnalyzer SNMP daemon may allow a remote authenticated attacker with user permission to cause a denial of service via SNMP GETBULK requests. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026FortinetADV-fortinet-1c03b6a1c123CVSSv3 Score: 4.9 An improper access control vulnerability [CWE-284] in FortiManager may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests. Revised on 2026-09-08 00:00:00
• –UnscoredSep 8, 2026Fortinet Crypto / certificateADV-fortinet-3ec4a7302c35CVSSv3 Score: 8.1 An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination website. Revised on 2026-09-08 00:00:00
• 5.3MediumAug 12, 2026Fortinet fortios Denial of serviceCVE-2026-71408A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests.
• –UnscoredAug 12, 2026Fortinet Auth bypass / access controlADV-fortinet-33de1c89f0f8CVSSv3 Score: 9.8 An Improper Authentication vulnerability [CWE-287] in the FortiWeb Remote Radius Type Admin Authentication configured with specific, non-default settings may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026FortinetADV-fortinet-c7020b6cf57fCVSSv3 Score: 5.3 An incomplete list of disallowed inputs [CWE-184] in FortiWeb WAF may allow an unauthenticated attacker to bypass policies via specifically crafted requests. Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026FortinetADV-fortinet-7c74097d457bCVSSv3 Score: 8.1 An Authentication Bypass Using an Alternate Path or Channel [CWE-288] vulnerability in FortiManager and FortiManager Cloud may allow a remote unauthenticated attacker to impersonate any FortiGate managed by the FortiManager with a specific CLI option set via crafted FGFM requests if the attacker has a valid certificate. Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026Fortinet Memory corruptionADV-fortinet-7938a6cdd00dCVSSv3 Score: 7.3 A buffer copy without checking size of input vulnerability [CWE-120] in FortiClient Windows may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets. Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026Fortinet SSRFADV-fortinet-0c1c2f2cba0bCVSSv3 Score: 3.8 A Server-Side request forgery (SSRF) [CWE-918] vulnerability in FortiSIEM GUI may allow an authenticated attacker to send HTTP requests originating from the targeted device via specially crafted HTTP requests Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026Fortinet Memory corruptionADV-fortinet-a9d679241800CVSSv3 Score: 5.6 A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS explicit proxy may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled. Revised on 2026-08-12 00:00:00
• –UnscoredAug 12, 2026Fortinet Denial of serviceADV-fortinet-2e0702d7d5e1CVSSv3 Score: 5.3 An Allocation of Resources Without Limits or Throttling vulnerability [CWE-770] in FortiOS may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests. Revised on 2026-08-12 00:00:00
• 5.3MediumJul 27, 2026Fortinet FortiOS Information disclosureCVE-2025-68686Affected: Fortinet FortiOS versions prior to 7.2.8 and 7.4.0. Attacker gains: Unauthorized access to sensitive information, including configuration and authentication data. Recommended action: Update FortiOS to version 7.2.8 or 7.4.0 and ensure all patches are applied.Exploited29% likely
• 9.1CriticalJul 16, 2026Fortinet FortiSandbox Code / command injectionCVE-2026-25089Fortinet FortiSandbox appliance is affected. An attacker gains remote code execution and full control of the appliance. Patch the FortiSandbox appliance to the latest version as soon as possible.Exploited76% likely
• 9.1CriticalJul 16, 2026Fortinet FortiSandbox Code / command injectionCVE-2026-39808Fortinet FortiSandbox appliance. An attacker gains arbitrary system command execution and remote code execution. Patch the Fortinet FortiSandbox appliance with the latest available version.Exploited93% likelyExploit codeNucleiDetection
• 6.6MediumJul 14, 2026Fortinet fortiproxy Memory corruptionCVE-2026-59837A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authent
• –UnscoredJul 14, 2026FortinetADV-fortinet-a4a48b8a26eaCVSSv3 Score: 4.3 A buffer over-read vulnerability [CWE-126] in FortiOS, FortiProxy, and FortiSASE may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request. Revised on 2026-07-14 00:00:00
• –UnscoredJul 14, 2026Fortinet XSSADV-fortinet-9fcb166214d5CVSSv3 Score: 5.9 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80] in FortiSIEM may allow a privileged administrator to execute unauthorized commands via crafted requests. Revised on 2026-07-14 00:00:00
• –UnscoredJul 14, 2026FortinetADV-fortinet-fce818aa2de2CVSSv3 Score: 3.4 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] in FortiOS and FortiProxy may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link. Revised on 2026-07-14 00:00:00
• –UnscoredJul 14, 2026FortinetADV-fortinet-769a7f0264e2CVSSv3 Score: 3.1 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] in FortiOS and FortiProxy captive portal may allow an attacker able to intercept and modify a user's authentication request to inject arbitrary headers via crafted HTTP requests. Revised on 2026-07-14 00:00:00

See every Fortinet entry on the dashboard.

Top products

• FortiOS5 CVEs in the last year, 1 exploited
• Multiple Products4 CVEs in the last year, 2 critical, 4 exploited
• FortiSandbox4 CVEs in the last year, 3 critical, 2 exploited
• FortiWeb3 CVEs in the last year, 1 critical, 2 exploited
• FortiClient EMS2 CVEs in the last year, 2 critical, 2 exploited
• FortiSIEM1 CVE in the last year, 1 critical
• fortiproxy1 CVE in the last year
• FortiMail1 CVE in the last year, 1 critical, 1 exploited
• FortiClientWindows1 CVE in the last year
• FortiAnalyzer1 CVE in the last year

Advisories

Official advisories from the last 90 days that name this vendor's CVEs.

• CCCS (Canada) · Oct 23, 2026Fortinet security advisory (AV26-1081)ADV-cccs-99f02180dced
• CCCS (Canada) · Oct 13, 2026Fortinet security advisory (AV26-1037)ADV-cccs-0b73a6530ea3
• Fortinet PSIRT · Oct 13, 2026GUI Denial of ServiceADV-fortinet-f3c0bfee9527
• Fortinet PSIRT · Oct 13, 2026Double free in signal handlerADV-fortinet-97d88dc8ed1e
• Fortinet PSIRT · Oct 13, 2026arbitrary command execution in fgfmsd daemonADV-fortinet-9294b3a0cae3
• Fortinet PSIRT · Oct 13, 2026Multiple Arbitrary File Read/Write via SQL InjectionADV-fortinet-8f79d056b397
• Fortinet PSIRT · Oct 13, 2026Broken authorizationADV-fortinet-716322ff36a0
• Fortinet PSIRT · Oct 13, 2026Persistent Denial of Service in Admin ProfileADV-fortinet-6d8857ef3a1a
• Fortinet PSIRT · Oct 13, 2026Improper access control and session management in the web management interfaceADV-fortinet-5536a304ec57
• Fortinet PSIRT · Oct 13, 2026Arbitrary file write in grpc phQueryMasterADV-fortinet-204c2ed5dd02
• Fortinet PSIRT · Oct 13, 2026Fabric API Authentication bypassADV-fortinet-0d32f8c8a739
• Fortinet PSIRT · Oct 13, 2026SQL command injection in webmailADV-fortinet-04610ccaed3c
• Fortinet PSIRT · Oct 1, 2026Improper limitation of a pathname to a restricted directoryADV-fortinet-72eff011d9fa
• Fortinet PSIRT · Sep 8, 2026Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive InformationADV-fortinet-f6e8c3105471
• Fortinet PSIRT · Sep 8, 2026Open Redirect on FortiSIEMADV-fortinet-acfafefcdcb5