Fortinet Multiple Products vulnerabilities

• fortinet fortios, fortipam, fortiproxy +4 more +6 more An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]... CVE-2025-61624 In KEV 5.4 MediumApril 14, 2026
• fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 more An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability... CVE-2026-24858 In KEVPublic exploit EPSS 86.6% 9.4 CriticalJanuary 27, 2026
• fortinet fortios, fortiswitchmanager, fortisase +3 more +5 more A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0... CVE-2025-25249 In KEV 7.4 HighJanuary 13, 2026
• fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 more A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0... CVE-2025-59718 In KEVPublic exploit EPSS 68.1% 9.1 CriticalDecember 9, 2025
• fortinet forticamera, fortimail, fortindr +4 more +6 more A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiVoice versions 7.2.0, 7.0... CVE-2025-32756 In KEVPublic exploit EPSS 30.9% 9.6 CriticalMay 13, 2025
• fortinet fortios, fortipam, fortiproxy +2 more +4 more A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7... CVE-2024-23113 In KEVPublic exploit EPSS 61.7% 9.8 CriticalFebruary 15, 2024
• fortinet fortios, fortiproxy, fortiswitchmanager +2 more +4 more An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version... CVE-2022-40684 In KEVPublic exploit EPSS 100.0% 9.8 CriticalOctober 18, 2022