Skip to content
Fortinet Fortiweb vulnerabilities
-
fortinet fortiweb
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0...
CVE-2026-26035
8.8 High
-
fortinet fortiweb
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,...
CVE-2026-70466
4.8 Medium
-
fortinet fortiweb
A out-of-bounds write vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0...
CVE-2026-40688
6.7 Medium
-
fortinet fortiweb
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb...
CVE-2026-39811
4.4 Medium
-
fortinet fortiweb
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...
CVE-2026-39814
6.2 Medium
-
fortinet fortiweb
A improper neutralization of special elements used in an os command ('os command injection')...
CVE-2025-66178
6.7 Medium
-
fortinet fortiweb
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0...
CVE-2026-24641
2.5 Low
-
fortinet fortiweb
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0...
CVE-2026-24640
5.9 Medium
-
fortinet fortiweb
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet...
CVE-2026-24017
7.3 High
-
fortinet fortiweb
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3,...
CVE-2025-48840
5.0 Medium
-
fortinet fortiweb
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7...
CVE-2026-30897
5.9 Medium
-
fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability...
CVE-2026-24858
In KEVPublic exploit
EPSS 86.6%
9.4 Critical
-
fortinet fortiweb, siemens ruggedcom ape1808 +1 more
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0,...
CVE-2025-59719
Known exploited
EPSS 27.4%
9.1 Critical
-
fortinet fortiweb
A use of password hash instead of password for authentication vulnerability [CWE-836]...
CVE-2025-64471
4.4 Medium
-
fortinet fortiweb
A reliance on cookies without validation and integrity checking vulnerability in Fortinet...
CVE-2025-64447
7.1 High
-
fortinet fortiweb
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all...
CVE-2025-59669
4.8 Medium
-
fortinet fortiweb
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...
CVE-2025-58034
In KEVPublic exploit
EPSS 54.7%
6.7 Medium
-
fortinet fortiweb
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0...
CVE-2025-64446
In KEVPublic exploit
EPSS 91.1%
9.4 Critical
-
fortinet fortimail, fortimanager, fortimanager cloud +9 more +11 more
A insertion of sensitive information into sent data in Fortinet FortiManager Cloud 7.4.1 through...
CVE-2024-47569
4.2 Medium
-
fortinet fortiweb
A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7...
CVE-2025-53609
EPSS 11.5%
4.7 Medium
-
fortinet fortiweb
A improper neutralization of special elements used in an os command ('os command injection')...
CVE-2025-47857
6.5 Medium
-
fortinet fortiweb
An improper neutralization of special elements used in an OS command ('OS Command Injection')...
CVE-2025-27759
6.7 Medium
-
fortinet fortiweb
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7...
CVE-2025-52970
Public exploit
EPSS 10.1%
7.7 High
-
fortinet fortiweb
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0...
CVE-2025-32766
6.3 Medium
-
fortinet fortiweb
An improper neutralization of special elements used in an SQL command ('SQL Injection')...
CVE-2025-25257
In KEVPublic exploit
EPSS 99.9%
9.6 Critical
-
fortinet fortios, fortiproxy, fortiweb +2 more
An Improper Privilege Management vulnerability [CWE-269] affecting Fortinet FortiOS version 7.6.0...
CVE-2025-22254
6.5 Medium
-
fortinet fortianalyzer, fortimanager, fortios +3 more +5 more
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...
CVE-2024-50565
3.0 Low
-
fortinet fortianalyzer, fortimanager, fortios +3 more +5 more
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in...
CVE-2024-26013
7.1 High
-
fortinet fortiweb
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version...
CVE-2024-46671
Public exploit
5.6 Medium
-
fortinet fortiweb
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...
CVE-2025-25254
EPSS 17.1%
6.8 Medium
-
fortinet fortios, fortios-6k7k, fortiproxy +5 more +7 more
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of...
CVE-2023-25610
Public exploit
EPSS 18.3%
9.3 Critical
-
fortinet fortiweb
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7...
CVE-2024-55594
5.5 Medium
-
fortinet fortiweb
An improper neutralization of special elements used in an SQL command ('SQL Injection')...
CVE-2022-29059
2.6 Low
-
fortinet fortios, fortipam, fortiproxy +2 more +4 more
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0...
CVE-2024-45324
7.0 High
-
fortinet fortiweb
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4...
CVE-2023-42784
5.5 Medium
-
fortinet fortiweb
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...
CVE-2024-55597
5.2 Medium
-
fortinet fortiweb
An improper neutralization of special elements used in an os command ('os command injection') in...
CVE-2024-50567
6.8 Medium
-
fortinet fortiweb
A improper neutralization of special elements used in an os command ('os command injection') in...
CVE-2024-50569
6.3 Medium
-
fortinet fortirecorder, fortivoice, fortiweb +2 more
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...
CVE-2024-48885
5.2 Medium
-
fortinet fortiweb
A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0...
CVE-2024-21758
6.1 Medium
-
fortinet fortimanager, fortimanager cloud, fortios +4 more +6 more
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet...
CVE-2024-48884
EPSS 15.2%
6.7 Medium
-
fortinet fortiweb
A improper neutralization of special elements used in an sql command ('sql injection') in...
CVE-2024-55593
2.6 Low
-
fortinet fortiweb
An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE...
CVE-2024-36509
3.8 Low
-
fortinet fortiweb
An improper certificate validation vulnerability [CWE-295] in FortiWeb 7.2.0 through 7.2.1, 7.0...
CVE-2024-33509
4.4 Medium
-
fortinet fortiwebmanager, fortiweb manager +1 more
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...
CVE-2024-23669
6.4 Medium
-
fortinet fortiweb
Multiple improper authorization vulnerabilities [CWE-285] in FortiWeb version 7.4.2 and below,...
CVE-2024-23665
5.6 Medium
-
fortinet fortiwebmanager, fortiweb manager +1 more
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...
CVE-2024-23667
7.6 High
-
fortinet fortiwebmanager, fortiweb manager +1 more
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...
CVE-2024-23668
8.6 High
-
fortinet fortiwebmanager, fortiweb manager +1 more
An improper authorization in Fortinet FortiWebManager version 7.2.0 and 7.0.0 through 7.0.4 and 6...
CVE-2024-23670
7.6 High
-
fortinet fortiweb
An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiWeb...
CVE-2024-23107
5.2 Medium
- Show olderLoading…