Skip to contentFortinet Fortiswitch vulnerabilities
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreA Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7,...CVE-2026-1061752.1 Low
- fortinet fortios, fortiproxy, fortipam +2 more +4 moreA buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7...CVE-2026-598404.1 Medium
- fortinet fortios, fortipam, fortiproxy +4 more +6 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]...CVE-2025-61624In KEV5.4 Medium
- fortinet fortiswitchaxfixedA buffer copy without checking size of input ('classic buffer overflow') vulnerability in...CVE-2026-226277.7 High
- fortinet fortiswitchaxfixedAn improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may...CVE-2026-226285.1 Medium
- fortinet fortios, fortiswitchmanager, fortisase +3 more +5 moreA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...CVE-2025-25249In KEV7.4 High
- fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 moreA improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0...CVE-2025-59718In KEVPublic exploitEPSS 68.1%9.1 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS...CVE-2024-260085.0 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4...CVE-2025-222585.7 Medium
- fortinet fortipam, fortiswitchmanager +1 moreA weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0...CVE-2025-492017.4 High
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet...CVE-2024-260097.9 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6...CVE-2025-222529.0 Critical
- fortinet fortiswitchA unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote...CVE-2024-48887Public exploitEPSS 15.7%9.3 Critical
- fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 moreA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of...CVE-2023-25610Public exploitEPSS 18.3%9.3 Critical
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version...CVE-2023-407216.3 Medium
- fortinet fortimanager, fortiadc, fortianalyzer +15 more +17 moreA externally controlled reference to a resource in another sphere in Fortinet FortiManager before...CVE-2022-234394.1 Medium
- fortinet fortiswitchAn improper neutralization of special elements used in an os command ('os command injection') in...CVE-2023-379377.6 High
- fortinet fortiswitchA use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2...CVE-2023-379369.6 Critical
- fortinet fortimanager, fortios, fortipam +3 more +5 moreA missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4...CVE-2024-260115.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and...CVE-2022-458623.5 Low
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0...CVE-2024-260106.7 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,...CVE-2023-366406.2 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreA use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,...CVE-2023-455836.2 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreA use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7...CVE-2024-23113In KEVPublic exploitEPSS 61.7%9.8 Critical
- fortinet fortimail, fortindr, fortirecorder +3 more +5 moreA cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x,...CVE-2022-274887.5 High
- fortinet fortiswitchmanagerAn improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2
7.0.0...CVE-2023-366356.9 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3,...CVE-2022-424746.2 Medium
- fortinet fortianalyzer, fortimanager, fortiportal +1 more +3 moreA exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0...CVE-2022-274905.1 Medium
- fortinet fortios, fortiproxy, fortiswitch +1 more +3 moreAn improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all...CVE-2021-430744.1 Medium
- fortinet fortios, fortiproxy, fortiswitchmanager +2 moreA relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,...CVE-2022-413358.6 High
- fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 moreAn authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version...CVE-2022-40684In KEVPublic exploitEPSS 100.0%9.8 Critical
- fortinet fortios, fortiproxy, fortiswitch +3 more +5 moreAn integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9...CVE-2021-427554.3 Medium
- fortinet fortios, fortiadc, fortianalyzer +13 more +15 moreA buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0...CVE-2021-427576.3 Medium
- fortinet fortiswitchA missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6,...CVE-2021-261116.5 Medium
- fortinet fortianalyzer, fortiap-s, fortimanager +2 more +4 moreAn Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6...CVE-2019-17657Fix available7.5 High
- fortinet fortiswitchFortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D...CVE-2016-45739.8 Critical
- fortinet fortios, fortiswitch +1 moreBuffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13,...CVE-2016-6909Public exploitEPSS 49.9%9.8 Critical