Fortinet Fortimanager Cloud vulnerabilities

• fortinet fortimanager, fortimanager cloud +1 more A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager... CVE-2026-70468 7.3 HighAugust 12, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability... CVE-2025-68649 5.4 MediumApril 14, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortianalyzer-bigdata +2 more +4 more An improper neutralization of special elements used in an sql command ('sql injection')... CVE-2025-61848 6.5 MediumApril 14, 2026
• fortinet fortianalyzer cloud, fortimanager cloud +1 more A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4,... CVE-2026-22828 7.3 HighApril 14, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more An improper restriction of excessive authentication attempts vulnerability in Fortinet... CVE-2026-22629 3.4 LowMarch 10, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer... CVE-2025-48418 6.4 MediumMarch 10, 2026
• fortinet fortianalyzer, fortimanager, fortimanager cloud +2 more An authentication bypass using an alternate path or channel vulnerability in Fortinet... CVE-2026-22572 6.8 MediumMarch 10, 2026
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0... CVE-2025-68648 6.5 MediumMarch 10, 2026
• fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 more A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through... CVE-2024-47569 4.2 MediumOctober 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 more A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0... CVE-2024-50571 6.5 MediumOctober 14, 2025
• fortinet fortimanager, fortimanager cloud +1 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ... CVE-2024-52964 5.2 MediumAugust 12, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')... CVE-2025-24474 2.6 LowJuly 8, 2025
• fortinet fortimanager, fortimanager cloud +1 more A improper neutralization of special elements used in a command ('command injection') in Fortinet... CVE-2024-46662 8.3 HighMarch 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +2 more +4 more An improper neutralization of special elements used in an OS command ('OS Command Injection')... CVE-2024-40584 6.8 MediumFebruary 11, 2025
• fortinet fortimanager, fortimanager cloud +1 more A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in... CVE-2024-33504 3.9 LowFebruary 11, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1,... CVE-2024-50563 6.7 MediumJanuary 16, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A incorrect privilege assignment in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0... CVE-2024-45331 6.9 MediumJanuary 16, 2025
• fortinet fortimanager, fortimanager cloud +1 more A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0... CVE-2024-35277 8.4 HighJanuary 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 more A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0... CVE-2024-48886 8.0 HighJanuary 14, 2025
• fortinet fortimanager, fortimanager cloud, fortianalyzer +1 more +3 more A improper privilege management in Fortinet FortiManager version 7.4.0 through 7.4.3, 7.2.0... CVE-2024-33503 6.7 MediumJanuary 14, 2025
• fortinet fortimanager, fortimanager cloud, fortios +4 more +6 more A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet... CVE-2024-48884 EPSS 15.2% 6.7 MediumJanuary 14, 2025
• fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 more A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version... CVE-2024-35273 7.0 HighJanuary 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 more A stack-based buffer overflow in Fortinet FortiAnalyzer versions 7.4.0 through 7.4.3, 7.2.0... CVE-2024-35276 5.0 MediumJanuary 14, 2025
• fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 more A improper neutralization of special elements used in an sql command ('sql injection') in... CVE-2024-35275 6.5 MediumJanuary 14, 2025
• fortinet fortimanager, fortimanager cloud +1 more A improper neutralization of special elements used in an os command ('os command injection') in... CVE-2024-50566 7.2 HighJanuary 14, 2025
• fortinet fortimanager, fortimanager cloud +1 more An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')... CVE-2024-48889 7.2 HighDecember 18, 2024
• fortinet fortianalyzer, fortimanager, fortimanager cloud +2 more A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through... CVE-2024-33505 5.3 MediumNovember 12, 2024
• fortinet fortimanager, fortimanager cloud +1 more A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through... CVE-2024-47575 In KEVPublic exploit EPSS 94.8% 9.8 CriticalOctober 23, 2024