Fortinet vulnerabilities

Products

• Fortios 283
• Fortiproxy 133
• Fortiweb 126
• Fortimanager 121
• Fortianalyzer 99
• Forticlient 86
• Fortisandbox 65
• Fortimail 49
• Fortios 49
• Fortiportal 46
• Fortiadc 45
• Fortipam 37
• Fortisiem 35
• Fortiweb 33
• Fortisoar 32
• Forticlientwindows 31
• Fortinac 30
• Fortimanager Cloud 28
• Fortivoice 25
• Fortiauthenticator 24
• Fortiwlm 23
• Forticlientems 22
• Fortiswitchmanager 21
• Fortiportal 19
• Antivirus 18
• Fortianalyzer Cloud 17
• Fortimanager Cloud 17
• Fortimail 17
• Fortirecorder 16
• Fortitester 16
• Fortiwan 16
• Forticlientmac 15
• Fortimanager Firmware 15
• Fortiswitch 15
• Fortianalyzer Cloud 14
• Fortiwlc 14
• Fortianalyzer Big Data 13
• Fortinac-f 13
• Fortindr 13
• Fortisoar On-premise 13

Show 122 moreShow less

• Fortianalyzer Firmware 12
• Fortisandbox 12
• Fortideceptor 11
• Fortimanager 11
• Fortisase 11
• Fortisoar Paas 11
• Fortiisolator 10
• Fortisandbox Paas 10
• Fortiap-w2 9
• Fortiddos-f 9
• Forticlientwindows 9
• Fortiwlm 9
• Fortisandbox Cloud 9
• Fortiadc 8
• Fortitester 8
• Fortisandbox Cloud 8
• Fortiap 7
• Fortiap-s 7
• Fortiap-u 7
• Forticlient Endpoint Management Server 7
• Forticlient Enterprise Management Server 7
• Forticlientlinux 7
• Fortiddos 7
• Fortiedr 7
• Fortiextender 7
• Fortiextender Firmware 7
• Fortianalyzer, Fortimanager 7
• Forticlientlinux 7
• Fortinac 7
• Multiple Products 7
• Fortimanager, Fortianalyzer 6
• Fortios, Fortiproxy 6
• Fortisiem 6
• Fortisoar 6
• Fortiwan 6
• Fcm-mb40 Firmware 5
• Fortiadc Firmware 5
• Fortianalyzer-bigdata 5
• Forticlientems 5
• Forticlient For Windows 5
• Fortiedr 5
• Fortirecorder Firmware 5
• Fortiweb Manager 5
• Fortiwebmanager 5
• Fortiaiops 4
• Fortidlp 4
• Fortidlp Agent 4
• Fortigate 4
• Fortianalyzer 4
• Fortideceptor 4
• Fortios And Fortiproxy 4
• Fortios And Fortiproxy 4
• Fortisra 4
• Fortibalancer 1000 Firmware 3
• Fortibalancer 2000 Firmware 3
• Fortibalancer 3000 Firmware 3
• Fortibalancer 400 Firmware 3
• Forticlient Ems 3
• Forticlient For Mac Os 3
• Forticlient For Windows 3
• Fortiauthenticator 3
• Forticlientmac 3
• Fortiisolator 3
• Fortiproxy 3
• Fortisiemwindowsagent 3
• Fortiwlc 3
• Fortios-6k7k 3
• Fortipresence 3
• Fortitoken Mobile 3
• Antivirus Engine 2
• Fortiadc-1000e 2
• Fortiadc-1500d 2
• Fortiadc-2000d 2
• Fortiadc-200d 2
• Fortiadc-300e 2
• Fortiadc-4000d 2
• Fortiadc-400e 2
• Fortiadc-600e 2
• Fortiadc Manager 2
• Fortiap-c 2
• Forticamera 2
• Forticamera Firmware 2
• Forticlientems Cloud 2
• Forticlientios 2
• Forticlient Sslvpn Client 2
• Fortiddos-cm 2
• Fortifone 2
• Fortigate-1000c 2
• Fortigate-100d 2
• Fortigate-110c 2
• Fortigate-1240b 2
• Fortigate-200b 2
• Fortigate-20c 2
• Fortigate-300c 2
• Fortigate-3040b 2
• Fortigate-310b 2
• Fortigate-311b 2
• Fortigate-3140b 2
• Fortigate-3240c 2
• Fortigate-3810a 2
• Fortigate-3950b 2
• Fortigate-40c 2
• Fortigate-5001a-sw 2
• Fortigate-5001b 2
• Fortigate-5020 2
• Fortigate-5060 2
• Fortigate-50b 2
• Fortigate-5101c 2
• Fortigate-5140b 2
• Fortigate-600c 2
• Fortigate-60c 2
• Fortigate-620b 2
• Fortigate-800c 2
• Fortigate-80c 2
• Fortigaterugged-100c 2
• Fortigate-voice-80c 2
• Fortiap-u 2
• Fortiproxy, Fortios 2
• Fortiswitch 2
• Fortios Ips Engine 2
• Fortisandbox Paas 2
• Fortiswitchaxfixed 2

Newest

• fortinet fortios A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow... CVE-2026-106174 6.7 MediumOctober 27, 2026
• fortinet fortisandbox, fortisandbox paas +1 more An authentication bypass using an alternate path or channel vulnerability in Fortinet... CVE-2026-107656 9.6 CriticalOctober 26, 2026
• fortinet fortios, fortiproxy, fortiswitch +2 more A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7,... CVE-2026-106175 2.1 LowOctober 13, 2026
• fortinet fortisandbox, fortisandbox cloud +1 more A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1,... CVE-2026-106172 4.9 MediumOctober 13, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2026-23707 6.5 MediumOctober 13, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +2 more An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2026-23706 5.9 MediumOctober 13, 2026
• fortinet fortianalyzer, fortimanager +1 more An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2026-23705 6.5 MediumOctober 13, 2026
• fortinet fortianalyzer, fortianalyzer cloud +1 more An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2025-46773 7.9 HighOctober 13, 2026
• fortinet fortimail An improper neutralization of special elements used in an SQL Command ("SQL Injection")... CVE-2025-57739 7.7 HighOctober 13, 2026
• fortinet fortisandbox An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0... CVE-2026-106170 4.8 MediumOctober 13, 2026
• fortinet fortisiem A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-106173 Public exploit 9.4 CriticalOctober 13, 2026
• fortinet fortisiem A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute... CVE-2026-106176 3.4 LowOctober 13, 2026
• fortinet fortimanager, fortimanager cloud +1 more A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-106171 5.3 MediumOctober 13, 2026
• fortinet fortimail An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... CVE-2026-104286 In KEVPublic exploit 9.8 CriticalOctober 1, 2026
• fortinet fortipam chrome extension A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome... CVE-2026-84388 9.1 CriticalSeptember 22, 2026
• fortinet fortimonitoronsight A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight... CVE-2026-84390 9.6 CriticalSeptember 11, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all... CVE-2026-84392 2.5 LowSeptember 8, 2026
• fortinet fortianalyzer A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may... CVE-2026-84391 5.9 MediumSeptember 8, 2026
• fortinet fortimanager, fortimanager cloud +1 more An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4,... CVE-2026-22575 4.7 MediumSeptember 8, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-84393 7.3 HighSeptember 8, 2026
• fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 more A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,... CVE-2026-26084 8.9 HighSeptember 8, 2026
• fortinet fortisoar on-premise, fortisoar paas +1 more A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR... CVE-2026-84385 4.9 MediumSeptember 8, 2026
• fortinet fortisiem A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0... CVE-2026-84389 2.8 LowSeptember 8, 2026
• fortinet fortisandbox A improper neutralization of special elements used in a command ('command injection')... CVE-2026-84387 6.7 MediumSeptember 8, 2026
• fortinet forticlientwindows A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7,... CVE-2026-84386 4.7 MediumSeptember 8, 2026
• fortinet fortimanager, fortimanager cloud +1 more A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager... CVE-2026-70468 7.3 HighAugust 12, 2026
• fortinet fortiweb An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0... CVE-2026-26035 8.8 HighAugust 12, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-71407 5.1 MediumAugust 12, 2026
• fortinet fortisiem A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0... CVE-2026-70467 3.4 LowAugust 12, 2026
• fortinet fortiweb A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,... CVE-2026-70466 4.8 MediumAugust 12, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0... CVE-2026-71408 5.0 MediumAugust 12, 2026
• fortinet forticlient, forticlientwindows +1 more A buffer copy without checking size of input ('classic buffer overflow') vulnerability in... CVE-2026-70465 7.3 HighAugust 12, 2026
• fortinet fortisiem A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in... CVE-2026-59838 5.3 MediumJuly 15, 2026
• fortinet fortios, fortiproxy, fortipam +2 more +4 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2026-59840 4.1 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2025-43892 4.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2026-23573 6.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-59839 5.0 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62826 3.1 LowJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62675 3.4 LowJuly 14, 2026
• fortinet fortisiem, fortisiemwindowsagent +1 more A improper restriction of communication channel to intended endpoints vulnerability in Fortinet... CVE-2026-59841 6.9 MediumJuly 14, 2026
• fortinet forticlientems A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5,... CVE-2026-59836 6.7 MediumJuly 14, 2026
• fortinet fortiauthenticator A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2,... CVE-2025-53379 7.0 HighJuly 14, 2026
• fortinet fortisandbox A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2... CVE-2026-59835 7.7 HighJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2... CVE-2026-59837 5.9 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]... CVE-2025-67862 6.0 MediumJune 9, 2026
• fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 more A improper neutralization of special elements used in an os command ('os command injection')... CVE-2026-25089 In KEVPublic exploit EPSS 76.1% 9.1 CriticalJune 9, 2026
• fortinet fortiportal A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal... CVE-2026-49938 6.2 MediumJune 9, 2026
• fortinet fortiap, fortiap-w2 +1 more An improper neutralization of special elements used in an os command ('os command injection')... CVE-2025-53870 6.5 MediumMay 12, 2026
• fortinet fortiap, fortiap-u, fortiap-w2 +2 more An improper neutralization of special elements used in an OS command ("OS Command Injection")... CVE-2025-53680 6.1 MediumMay 12, 2026
• fortinet fortianalyzer, fortimanager +1 more A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6... CVE-2025-67604 5.2 MediumMay 12, 2026
• Show olderLoading…