Fortinet Fortiswitchmanager vulnerabilities

• fortinet fortios, fortiproxy, fortipam +2 more +4 more A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7... CVE-2026-59840 4.1 MediumJuly 14, 2026
• fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... CVE-2025-61624 In KEV 5.4 MediumApril 14, 2026
• fortinet fortios, fortiswitchmanager, fortisase +3 more +5 more A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0... CVE-2025-25249 In KEV 7.4 HighJanuary 13, 2026
• fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 more A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0... CVE-2025-59718 In KEVPublic exploit EPSS 68.1% 9.1 CriticalDecember 9, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS... CVE-2024-26008 5.0 MediumOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4... CVE-2025-22258 5.7 MediumOctober 14, 2025
• fortinet fortipam, fortiswitchmanager +1 more A weak authentication in Fortinet FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0... CVE-2025-49201 7.4 HighOctober 14, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet... CVE-2024-26009 7.9 HighAugust 12, 2025
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6... CVE-2025-22252 9.0 CriticalMay 28, 2025
• fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 more A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of... CVE-2023-25610 Public exploit EPSS 18.3% 9.3 CriticalMarch 24, 2025
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A use of externally-controlled format string vulnerability [CWE-134] in Fortinet FortiOS version... CVE-2023-40721 6.3 MediumFebruary 11, 2025
• fortinet fortimanager, fortios, fortipam +3 more +5 more A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4... CVE-2024-26011 5.2 MediumNovember 12, 2024
• fortinet fortios, fortipam, fortiproxy +1 more +3 more An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and... CVE-2022-45862 3.5 LowAugust 13, 2024
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0... CVE-2024-26010 6.7 MediumJune 11, 2024
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4,... CVE-2023-36640 6.2 MediumMay 14, 2024
• fortinet fortios, fortipam, fortiproxy +1 more +3 more A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.5,... CVE-2023-45583 6.2 MediumMay 14, 2024
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7... CVE-2024-23113 In KEVPublic exploit EPSS 61.7% 9.8 CriticalFebruary 15, 2024
• fortinet fortiswitchmanager An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0... CVE-2023-36635 6.9 MediumSeptember 7, 2023
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3,... CVE-2022-42474 6.2 MediumJune 13, 2023
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2,... CVE-2022-41335 8.6 HighFebruary 16, 2023
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 more An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version... CVE-2022-40684 In KEVPublic exploit EPSS 100.0% 9.8 CriticalOctober 18, 2022