Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-536084.6 Medium
- fortinet fortiwebAn authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3,...CVE-2025-488405.0 Medium
- fortinet fortiswitchaxfixedA buffer copy without checking size of input ('classic buffer overflow') vulnerability in...CVE-2026-226277.7 High
- fortinet fortimanagerA Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4...CVE-2025-548207.0 High
- fortinet fortimail, fortirecorder, fortivoice +2 moreA cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet...CVE-2025-557173.8 Low
- fortinet fortisandbox cloud, fortisandbox paas +1 moreAn improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-258366.7 Medium
- fortinet fortiwebA stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7...CVE-2026-308975.9 Medium
- fortinet fortiswitchaxfixedAn improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may...CVE-2026-226285.1 Medium
- fortinet fortiosAn Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet...CVE-2026-221537.5 High
- fortinet fortiosAn Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200]...CVE-2025-68686In KEVEPSS 29.5%5.3 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6...CVE-2025-641576.7 Medium
- fortinet forticlient, forticlientwindows +1 moreAn Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59]...CVE-2025-62676Public exploit6.4 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn Improper Verification of Source of a Communication Channel vulnerability [CWE-940]...CVE-2025-624393.8 Low
- fortinet fortios, siemens ruggedcom ape1808 +1 moreAn inconsistent interpretation of http requests ('http request smuggling') vulnerability in...CVE-2025-550185.2 Medium
- fortinet fortiauthenticatorA missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,...CVE-2026-217436.8 Medium
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-524367.9 High
- fortinet forticlientems, forticlient ems +1 moreAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-21643In KEVPublic exploitEPSS 97.7%9.1 Critical
- fortinet fortiosFortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device...CVE-2026-25815Disputed3.2 Low
- fortinet fortianalyzer, fortimanager, fortinac-f +6 more +8 moreAn Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability...CVE-2026-24858In KEVPublic exploitEPSS 86.6%9.4 Critical
- fortinet fortios, fortiswitchmanager, fortisase +3 more +5 moreA heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...CVE-2025-25249In KEV7.4 High
- fortinet fortisandboxA Server-Side Request Forgery (SSRF) vulnerability [CWE-918] vulnerability in Fortinet...CVE-2025-676853.4 Low
- fortinet fortivoiceAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2025-586935.7 Medium
- fortinet fortifoneAn exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet...CVE-2025-478559.3 Critical
- fortinet fortisiemAn improper neutralization of special elements used in an os command ('os command injection')...CVE-2025-64155Public exploitEPSS 43.9%9.4 Critical
- fortinet forticlientemsAn improper neutralization of special elements used in an SQL command ('SQL Injection')...CVE-2025-599226.8 Medium
- fortinet fortianalyzer, fortimanager, fortios +1 more +3 moreA key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2,...CVE-2024-405935.9 Medium
- fortinet fortios, fortipam, fortiproxy +2 more +4 moreAn insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0...CVE-2024-475706.3 Medium
- fortinet fortiweb, siemens ruggedcom ape1808 +1 moreAn improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0,...CVE-2025-59719Known exploitedEPSS 27.4%9.1 Critical
- fortinet fortios, fortiproxy, fortiswitchmanager +3 more +5 moreA improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0...CVE-2025-59718In KEVPublic exploitEPSS 68.1%9.1 Critical
- fortinet fortisandbox, fortisandbox cloud +1 moreAn improper neutralization of special elements used in an OS command ('OS Command Injection')...CVE-2025-53679EPSS 11.9%6.9 Medium
- fortinet fortisandboxAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-543535.3 Medium
- fortinet fortisandboxAn Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')...CVE-2025-53949EPSS 16.8%7.0 High
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2,...CVE-2025-598106.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn unverified password change vulnerability [CWE-620] vulnerability in Fortinet FortiSOAR PaaS 7...CVE-2025-598086.5 Medium
- fortinet fortiportalAn Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow...CVE-2025-548386.4 Medium
- fortinet fortiosAn insufficient session expiration vulnerability [CWE-613] in Fortinet FortiOS 7.4.0, FortiOS 7.2...CVE-2025-626315.3 Medium
- fortinet fortivoiceAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2025-641566.8 Medium
- fortinet fortiextender, fortiextender firmware +1 moreA improper neutralization of special elements used in an os command ('os command injection') in...CVE-2025-641536.7 Medium
- fortinet fortiauthenticatorAn improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.4,...CVE-2025-599232.6 Low
- fortinet fortiauthenticatorA direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6...CVE-2025-578232.6 Low
- fortinet fortiwebA use of password hash instead of password for authentication vulnerability [CWE-836]...CVE-2025-644714.4 Medium
- fortinet fortivoiceMultiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal')...CVE-2025-600247.7 High
- fortinet fortiwebA reliance on cookies without validation and integrity checking vulnerability in Fortinet...CVE-2025-644477.1 High
- fortinet fortiadcA improper neutralization of script-related html tags in a web page (basic xss) vulnerability in...CVE-2025-584124.2 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4...CVE-2025-538436.9 Medium
- fortinet fortiadcAn Out-of-bounds Write vulnerability [CWE-787] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0...CVE-2025-488396.3 Medium
- fortinet fortios, fortisase, siemens ruggedcom ape1808 +2 moreA stack-based buffer overflow in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4...CVE-2025-584136.9 Medium
- fortinet fortios, fortipam, fortiproxy +1 more +3 moreAn Improper Privilege Management vulnerability [CWE-269] in Fortinet FortiOS 7.6.0 through 7.6.3,...CVE-2025-548211.7 Low
- fortinet fortisandboxAn Improper Isolation or Compartmentalization vulnerability [CWE-653] in Fortinet FortiSandbox 5...CVE-2025-462155.0 Medium
- fortinet fortiwebA use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all...CVE-2025-596694.8 Medium
- Show moreLoading…