Fortinet Fortios vulnerabilities

• fortinet fortios A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow... CVE-2026-106174 6.7 MediumOctober 27, 2026
• fortinet fortios, fortiproxy, fortiswitch +2 more A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7,... CVE-2026-106175 2.1 LowOctober 13, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all... CVE-2026-84392 2.5 LowSeptember 8, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-84393 7.3 HighSeptember 8, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-71407 5.1 MediumAugust 12, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0... CVE-2026-71408 5.0 MediumAugust 12, 2026
• fortinet fortios, fortiproxy, fortipam +2 more +4 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2026-59840 4.1 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2025-43892 4.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2026-23573 6.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-59839 5.0 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62826 3.1 LowJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62675 3.4 LowJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2... CVE-2026-59837 5.9 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]... CVE-2025-67862 6.0 MediumJune 9, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0... CVE-2025-53844 8.3 HighMay 12, 2026
• fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... CVE-2025-61624 In KEV 5.4 MediumApril 14, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7... CVE-2025-53847 6.2 MediumApril 14, 2026
• fortinet fortios An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet... CVE-2026-22153 7.5 HighFebruary 10, 2026
• fortinet fortios An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200]... CVE-2025-68686 In KEV EPSS 29.5% 5.3 MediumFebruary 10, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6... CVE-2025-64157 6.7 MediumFebruary 10, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more An Improper Verification of Source of a Communication Channel vulnerability [CWE-940]... CVE-2025-62439 3.8 LowFebruary 10, 2026
• fortinet fortios, siemens ruggedcom ape1808 +1 more An inconsistent interpretation of http requests ('http request smuggling') vulnerability in... CVE-2025-55018 5.2 MediumFebruary 10, 2026
• fortinet fortios Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device... CVE-2026-25815 Disputed 3.2 LowFebruary 5, 2026
• fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability... CVE-2026-24858 In KEVPublic exploit EPSS 86.6% 9.4 CriticalJanuary 27, 2026
• fortinet fortios, fortiswitchmanager, fortisase +3 more +5 more A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0... CVE-2025-25249 In KEV 7.4 HighJanuary 13, 2026
• fortinet fortianalyzer, fortimanager, fortios +1 more +3 more A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2,... CVE-2024-40593 5.9 MediumDecember 11, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0... CVE-2024-47570 6.3 MediumDecember 9, 2025
• fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 more A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0... CVE-2025-59718 In KEVPublic exploit EPSS 68.1% 9.1 CriticalDecember 9, 2025
• fortinet fortios An insufficient session expiration vulnerability [CWE-613] in Fortinet FortiOS 7.4.0, FortiOS 7.2... CVE-2025-62631 5.3 MediumDecember 9, 2025
• fortinet fortios, siemens ruggedcom ape1808 +1 more A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4... CVE-2025-53843 6.9 MediumNovember 18, 2025
• fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 more A stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4... CVE-2025-58413 6.9 MediumNovember 18, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,... CVE-2025-54821 1.7 LowNovember 18, 2025
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0... CVE-2025-31514 2.6 LowOctober 14, 2025
• fortinet fortios, fortiproxy +1 more An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1... CVE-2025-54822 4.2 MediumOctober 14, 2025
• fortinet fortios, fortiproxy +1 more An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0... CVE-2025-25255 4.8 MediumOctober 14, 2025
• fortinet fortios An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2... CVE-2025-25252 4.3 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS... CVE-2024-26008 5.0 MediumOctober 14, 2025
• fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 more A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through... CVE-2024-47569 4.2 MediumOctober 14, 2025
• fortinet fortios, fortiproxy +1 more A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7... CVE-2023-46718 6.3 MediumOctober 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 more A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0... CVE-2024-50571 6.5 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortisase +1 more +3 more An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS... CVE-2025-31366 4.5 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy... CVE-2025-25253 6.8 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4... CVE-2025-22258 5.7 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version... CVE-2025-57740 6.7 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortisase +1 more +3 more An URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7... CVE-2025-47890 2.5 LowOctober 14, 2025
• fortinet fortios An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0... CVE-2025-58325 7.8 HighOctober 14, 2025
• fortinet fortios, siemens ruggedcom ape1808 +1 more An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3... CVE-2025-58903 2.5 LowOctober 14, 2025
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7... CVE-2025-22862 6.3 MediumOctober 2, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet... CVE-2024-26009 7.9 HighAugust 12, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,... CVE-2025-25248 4.8 MediumAugust 12, 2025
• Show olderLoading…