Fortinet Fortiproxy vulnerabilities

• fortinet fortios, fortiproxy, fortiswitch +2 more A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7,... CVE-2026-106175 2.1 LowOctober 13, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all... CVE-2026-84392 2.5 LowSeptember 8, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1... CVE-2026-84393 7.3 HighSeptember 8, 2026
• fortinet fortios, fortiproxy, fortipam +2 more +4 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2026-59840 4.1 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2025-43892 4.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')... CVE-2026-23573 6.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in... CVE-2026-59839 5.0 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62826 3.1 LowJuly 14, 2026
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')... CVE-2025-62675 3.4 LowJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2... CVE-2026-59837 5.9 MediumJuly 14, 2026
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244]... CVE-2025-67862 6.0 MediumJune 9, 2026
• fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... CVE-2025-61624 In KEV 5.4 MediumApril 14, 2026
• fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability... CVE-2026-24858 In KEVPublic exploit EPSS 86.6% 9.4 CriticalJanuary 27, 2026
• fortinet fortios, fortipam, fortiproxy +2 more +4 more An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0... CVE-2024-47570 6.3 MediumDecember 9, 2025
• fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 more A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0... CVE-2025-59718 In KEVPublic exploit EPSS 68.3% 9.1 CriticalDecember 9, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,... CVE-2025-54821 1.7 LowNovember 18, 2025
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Insertion of Sensitive Information into Log File vulnerability [CWE-532] in FortiOS 7.6.0... CVE-2025-31514 2.6 LowOctober 14, 2025
• fortinet fortios, fortiproxy +1 more An improper authorization vulnerability [CWE-285] in Fortinet FortiOS version 7.4.0 through 7.4.1... CVE-2025-54822 4.2 MediumOctober 14, 2025
• fortinet fortios, fortiproxy +1 more An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiProxy 7.6.0... CVE-2025-25255 4.8 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS... CVE-2024-26008 5.0 MediumOctober 14, 2025
• fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 more A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through... CVE-2024-47569 4.2 MediumOctober 14, 2025
• fortinet fortios, fortiproxy +1 more A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7... CVE-2023-46718 6.3 MediumOctober 14, 2025
• fortinet fortianalyzer, fortianalyzer cloud, fortimanager +3 more +5 more A heap-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0... CVE-2024-50571 6.5 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortisase +1 more +3 more An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] in FortiOS... CVE-2025-31366 4.5 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortipam +1 more +3 more An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy... CVE-2025-25253 6.8 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4... CVE-2025-22258 5.7 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version... CVE-2025-57740 6.7 MediumOctober 14, 2025
• fortinet fortios, fortiproxy, fortisase +1 more +3 more An URL Redirection to Untrusted Site vulnerabilities [CWE-601] in FortiOS 7.6.0 through 7.6.2, 7... CVE-2025-47890 2.5 LowOctober 14, 2025
• fortinet fortios, fortiproxy, siemens ruggedcom ape1808 +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7... CVE-2025-22862 6.3 MediumOctober 2, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet... CVE-2024-26009 7.9 HighAugust 12, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below,... CVE-2025-25248 4.8 MediumAugust 12, 2025
• fortinet fortios, fortipam, fortiproxy +2 more A double free vulnerability [CWE-415] in Fortinet FortiOS version 7.4.0, version 7.2.0 through 7... CVE-2023-45584 6.3 MediumAugust 12, 2025
• fortinet fortios, fortiproxy +1 more A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6... CVE-2024-52965 6.8 MediumJuly 8, 2025
• fortinet fortios, fortiproxy, fortisase +1 more +3 more An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version... CVE-2024-55599 4.9 MediumJuly 8, 2025
• fortinet fortios, fortiproxy +1 more A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0... CVE-2024-50568 5.6 MediumJune 10, 2025
• fortinet fortios, fortiproxy +1 more An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before &... CVE-2023-29184 3.1 LowJune 10, 2025
• fortinet fortios, fortiproxy, fortiweb +2 more An Improper Privilege Management vulnerability [CWE-269] affecting Fortinet FortiOS version 7.6.0... CVE-2025-22254 6.5 MediumJune 10, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0,... CVE-2024-50562 Public exploit 4.4 MediumJune 10, 2025
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6... CVE-2025-22252 9.0 CriticalMay 28, 2025
• fortinet fortianalyzer, fortimanager, fortios +3 more +5 more A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in... CVE-2024-50565 3.0 LowApril 8, 2025
• fortinet fortianalyzer, fortimanager, fortios +3 more +5 more A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in... CVE-2024-26013 7.1 HighApril 8, 2025
• fortinet fortios, fortiproxy +1 more Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration ... CVE-2023-37930 6.7 MediumApril 8, 2025
• fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 more A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of... CVE-2023-25610 Public exploit EPSS 18.3% 9.3 CriticalMarch 24, 2025
• fortinet fortios, fortiproxy +1 more An improper neutralization of input during web page generation in the SSL VPN portal of... CVE-2019-15706 4.0 MediumMarch 17, 2025
• fortinet fortios, fortiproxy +1 more An improper neutralization of input during web page Generation vulnerability [CWE-79] in FortiOS... CVE-2024-26006 6.9 MediumMarch 14, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0... CVE-2024-45324 7.0 HighMarch 11, 2025
• fortinet fortios, fortiproxy, fortios and fortiproxy +2 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting... CVE-2025-24472 In KEVPublic exploit 8.1 HighFebruary 11, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version... CVE-2023-40721 6.3 MediumFebruary 11, 2025
• fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 more A externally controlled reference to a resource in another sphere in Fortinet FortiManager before... CVE-2022-23439 4.1 MediumJanuary 22, 2025
• fortinet fortios, fortiproxy +1 more An improper neutralization of crlf sequences in http headers ('http response splitting') in... CVE-2024-54021 6.4 MediumJanuary 14, 2025
• Show olderLoading…