Skip to content

Fortinet Fortiauthenticator vulnerabilities

fortinet fortiauthenticatorA use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262579.0 CriticalNovember 11, 2026
fortinet fortiauthenticatorA url redirection to untrusted site ('open redirect') vulnerability in Fortinet...CVE-2026-1215265.8 MediumNovember 11, 2026
fortinet fortiauthenticatorA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-1262528.3 HighNovember 11, 2026
fortinet fortiauthenticatorA incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262519.1 CriticalNovember 11, 2026
fortinet fortiauthenticatorA incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262508.2 HighNovember 11, 2026
fortinet fortiauthenticatorA insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through...CVE-2026-1262487.5 HighNovember 11, 2026
fortinet fortiauthenticatorA improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262497.2 HighNovember 11, 2026
fortinet fortiauthenticatorA null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262467.5 HighNovember 11, 2026
fortinet fortiauthenticatorA use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0...CVE-2026-1262477.2 HighNovember 11, 2026
fortinet fortiauthenticatorA out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262458.1 HighNovember 11, 2026
fortinet fortiauthenticatorA allocation of resources without limits or throttling vulnerability in Fortinet...CVE-2026-1262447.5 HighNovember 11, 2026
fortinet fortiauthenticatorA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-1262418.8 HighNovember 11, 2026
fortinet fortiauthenticatorA stack-based buffer overflow vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262397.5 HighNovember 11, 2026
fortinet fortiauthenticatorA improper neutralization of special elements used in an ldap query ('ldap injection')...CVE-2026-1262408.2 HighNovember 11, 2026
fortinet fortiauthenticatorA incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262388.6 HighNovember 11, 2026
fortinet fortiauthenticatorA loop with unreachable exit condition ('infinite loop') vulnerability in Fortinet...CVE-2026-1262377.5 HighNovember 11, 2026
fortinet fortiauthenticatorA incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262437.2 HighNovember 11, 2026
fortinet fortiauthenticatorA incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,...CVE-2026-1262427.4 HighNovember 11, 2026
fortinet fortiauthenticatorA out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2,...CVE-2025-533797.0 HighJuly 14, 2026
fortinet fortiauthenticatorA improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator...CVE-2026-44277Public exploit9.1 CriticalMay 12, 2026
fortinet fortiauthenticatorA missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,...CVE-2026-217436.8 MediumFebruary 10, 2026
fortinet fortiauthenticatorAn improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.4,...CVE-2025-599232.6 LowDecember 9, 2025
fortinet fortiauthenticatorA direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6...CVE-2025-578232.6 LowDecember 9, 2025
fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 MediumJanuary 22, 2025
fortinet fortiauthenticatorA URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6...CVE-2024-236645.8 MediumJune 3, 2024
fortinet fortiauthenticator, fortios +1 moreA clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6...CVE-2022-223025.3 MediumJuly 11, 2023
fortinet fortiauthenticatorAn improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in...CVE-2022-358504.2 MediumApril 11, 2023
fortinet fortiauthenticatorA improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet...CVE-2023-26208Public exploit3.5 LowMarch 9, 2023
fortinet fortiauthenticator agent for microsoft outlook web access, fortiauthenticator outlookagent +1 moreAn improper neutralization of input during web page generation vulnerability [CWE-79] in...CVE-2022-223046.1 MediumJuly 18, 2022
fortinet fortiauthenticatorAn improper neutralization of special elements used in an OS command vulnerability in the command...CVE-2021-261166.7 MediumApril 6, 2022
fortinet fortiauthenticatorAn improper access control vulnerability [CWE-284] in FortiAuthenticator HA service 6.3.2 and...CVE-2021-361774.2 MediumFebruary 2, 2022
fortinet fortiauthenticatorA improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to bypass the...CVE-2021-430685.4 MediumDecember 9, 2021
fortinet fortiauthenticatorA exposure of sensitive information to an unauthorized actor in Fortinet FortiAuthenticator...CVE-2021-430678.3 HighDecember 8, 2021
fortinet fortiauthenticator, fortisandbox, fortisandbox, fortiauthenticator +2 moreAn uncontrolled resource consumption (denial of service) vulnerability in the login modules of...CVE-2021-221247.5 HighAugust 4, 2021
fortinet fortiauthenticatorUsage of hard-coded cryptographic keys to encrypt configuration files and debug logs in...CVE-2021-240054.0 MediumJuly 6, 2021
fortinet fortiauthenticator, fortiauthenticator web ui +1 moreAn improper neutralization of input during web page generation in FortiAuthenticator WEB UI 6.0.0...CVE-2019-161546.1 MediumJanuary 7, 2020
fortinet fortiauthenticatorA cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to...CVE-2018-91866.1 MediumMay 31, 2018
fortinet fortiauthenticatorCross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote...CVE-2015-14594.3 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain...CVE-2015-14586.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to...CVE-2015-14574.9 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which...CVE-2015-14564.0 MediumFebruary 3, 2015
fortinet fortiauthenticatorFortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and ...CVE-2015-14557.5 HighFebruary 3, 2015
fortinet fortiauthenticatorFortiGuard FortiAuthenticator before 3.0 allows remote administrators to gain privileges via the...CVE-2013-69909.0 HighApril 30, 2014