Skip to content

Fortinet Fortinac vulnerabilities

fortinet fortinac-fAn URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in...CVE-2026-217412.2 LowApril 14, 2026
fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability...CVE-2026-24858In KEVPublic exploitEPSS 86.6%9.4 CriticalJanuary 27, 2026
fortinet fortinac-fAn improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below...CVE-2023-487854.4 MediumMarch 14, 2025
fortinet fortinacA improper neutralization of special elements used in a command ('command injection') in Fortinet...CVE-2023-33300EPSS 14.1%4.8 MediumMarch 14, 2025
fortinet fortinacAn improper neutralization of inputs during web page generation vulnerability [CWE-79] in...CVE-2024-314886.1 MediumMay 14, 2024
fortinet fortinacAn improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2023-262066.8 MediumFebruary 15, 2024
fortinet fortinacA deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8...CVE-2023-33299EPSS 24.3%9.6 CriticalJune 23, 2023
fortinet fortinac, fortinac-f +1 moreAn improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7...CVE-2023-226337.2 HighJune 13, 2023
fortinet fortinacAn access control vulnerability [CWE-284] in FortiNAC version 9.4.2 and below, version 9.2.7 and...CVE-2022-399467.2 HighJune 13, 2023
fortinet fortinac, fortinac-f +1 moreAn improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2023-226375.9 MediumMay 3, 2023
fortinet fortinac, fortinac-f +1 moreA use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC...CVE-2023-262036.1 MediumMay 3, 2023
fortinet fortinac, fortinac-f +1 moreA weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4...CVE-2022-458605.0 MediumMay 3, 2023
fortinet fortinacA use of a weak cryptographic algorithm vulnerability [CWE-327] in FortiNAC 9.4.1 and below, 9.2...CVE-2022-458583.8 LowMay 3, 2023
fortinet fortinac, fortinac-f +1 moreA URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F...CVE-2022-439503.9 LowMay 3, 2023
fortinet fortinac, fortinac-f +1 moreAn insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4...CVE-2022-458593.9 LowMay 3, 2023
fortinet fortinac, fortinac-f +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC...CVE-2022-439514.8 MediumApril 11, 2023
fortinet fortinacA improper neutralization of input during web page generation ('cross-site scripting') in...CVE-2022-406767.1 HighMarch 7, 2023
fortinet fortinacA improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC...CVE-2022-399537.8 HighMarch 7, 2023
fortinet fortinacSeveral improper neutralization of inputs during web page generation vulnerability [CWE-79] in...CVE-2023-226386.7 MediumFebruary 16, 2023
fortinet fortinacA improper neutralization of argument delimiters in a command ('argument injection') in Fortinet...CVE-2022-406777.2 HighFebruary 16, 2023
fortinet fortinacA external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...CVE-2022-39952Public exploitEPSS 99.8%9.8 CriticalFebruary 16, 2023
fortinet fortinac, fortinac-f +1 moreSome cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7,...CVE-2022-406756.0 MediumFebruary 16, 2023
fortinet fortinac, fortinac-f +1 moreAn improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0...CVE-2022-399546.9 MediumFebruary 16, 2023
fortinet fortinacAn insufficiently protected credentials in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5,...CVE-2022-406787.4 HighFebruary 16, 2023
fortinet fortinacMultiple improper neutralization of input during web page generation ('Cross-site Scripting')...CVE-2022-383765.8 MediumFebruary 16, 2023
fortinet fortinac, fortinac-f +1 moreAn improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4...CVE-2022-383758.6 HighFebruary 16, 2023
fortinet fortinacAn empty password in configuration file vulnerability [CWE-258] in FortiNAC version 8.3.7 and below, 8.5.2 and below, 8.5.4, 8.6.0, 8.6.5 and below, 8.7.6 and below, 8.8.11 and below, 9.1.5 and below,…CVE-2022-261178.8 HighJuly 18, 2022
fortinet fortinacMultiple improper neutralization of special elements used in SQL commands ('SQL Injection')...CVE-2022-261167.2 HighMay 11, 2022
fortinet fortinacA incorrect permission assignment for critical resource in Fortinet FortiNAC version 9.2.0, version 9.1.3 and below, version 8.8.9 and below allows attacker to gain higher privileges via the access to…CVE-2021-430657.8 HighDecember 9, 2021
fortinet fortinacA privilege escalation vulnerability in FortiNAC versions 8.8.8 and below and 9.1.2 and below may...CVE-2021-410217.8 HighDecember 8, 2021
fortinet fortinacA privilege escalation vulnerability in FortiNAC version below 8.8.2 may allow an admin user to...CVE-2021-240116.3 MediumMay 10, 2021
fortinet fortinacAn improper neutralization of input vulnerability in FortiNAC before 8.7.2 may allow a remote...CVE-2020-128166.1 MediumSeptember 24, 2020
fortinet fortinacAn Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in...CVE-2019-55946.1 MediumAugust 23, 2019