Skip to contentFortinet vulnerabilities
Products
Show 102 moreShow less
Newest
- fortinet fortimailAn improper neutralization of special elements used in an SQL Command ("SQL Injection&")...CVE-2025-536816.3 Medium
- fortinet fortideceptorAn improper neutralization of argument delimiters in a command ('argument injection')...CVE-2026-256904.0 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0...CVE-2025-538448.3 High
- fortinet fortitokenandroid, fortitoken mobile +1 moreA improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6...CVE-2026-442795.0 Medium
- fortinet forticlient, forticlientwindows +1 moreA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through...CVE-2026-442782.1 Low
- fortinet fortindrAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-250884.9 Medium
- fortinet fortiauthenticatorA improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator...CVE-2026-44277Public exploit9.1 Critical
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox...CVE-2026-260839.1 Critical
- fortinet fortiwebA out-of-bounds write vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0...CVE-2026-406886.7 Medium
- fortinet fortios, fortipam, fortiproxy +4 more +6 moreAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22]...CVE-2025-61624In KEV5.4 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2025-686495.4 Medium
- fortinet fortinac-fAn URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in...CVE-2026-217412.2 Low
- fortinet fortisandboxA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5,...CVE-2026-39813Public exploitEPSS 44.0%9.1 Critical
- fortinet fortianalyzer, fortianalyzer cloud, fortianalyzer-bigdata +2 more +4 moreAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2025-618486.5 Medium
- fortinet fortiddos-fA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-398157.9 High
- fortinet fortianalyzer cloud, fortimanager cloud +1 moreA heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4,...CVE-2026-228287.3 High
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...CVE-2026-225736.2 Medium
- fortinet forticlientemsA use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4...CVE-2026-398105.2 Medium
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreAn Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')...CVE-2025-618864.9 Medium
- fortinet fortiwebA integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb...CVE-2026-398114.4 Medium
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-398124.3 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR...CVE-2026-237086.7 Medium
- fortinet fortindr, fortivoice +1 moreAn exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR...CVE-2024-231045.4 Medium
- fortinet fortiwebA relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0...CVE-2026-398146.2 Medium
- fortinet fortisandbox, fortisandbox cloud, fortisandbox paas +2 moreA improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in...CVE-2026-256916.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR...CVE-2025-598094.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-221556.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-217425.4 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-225744.1 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreAn improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-221544.4 Medium
- fortinet fortios, siemens ruggedcom ape1808 +1 moreA missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7...CVE-2025-538476.2 Medium
- fortinet fortisoar, fortisoar on-premise, fortisoar paas +2 moreA storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0...CVE-2026-225764.1 Medium
- fortinet fortisandbox, fortisandbox paas +1 moreA improper neutralization of special elements used in an os command ('os command injection')...CVE-2026-39808In KEVPublic exploitEPSS 93.2%9.1 Critical
- fortinet fortisandbox, fortisandbox paas, fortisandbox cloud +2 moreA insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5...CVE-2026-273162.5 Low
- fortinet forticlientemsA improper neutralization of special elements used in an sql command ('sql injection')...CVE-2026-398096.2 Medium
- fortinet forticlientems, forticlient ems +1 moreA improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow...CVE-2026-35616In KEVPublic exploitEPSS 94.0%9.1 Critical
- fortinet fortiwebA improper neutralization of special elements used in an os command ('os command injection')...CVE-2025-661786.7 Medium
- fortinet fortiwebA NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0...CVE-2026-246412.5 Low
- fortinet fortiwebA Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0...CVE-2026-246405.9 Medium
- fortinet fortisoar agent communication bridgeAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability ...CVE-2025-546595.5 Medium
- fortinet fortisiemAn improper neutralization of input during web page generation ('cross-site scripting')...CVE-2026-259724.1 Medium
- fortinet fortiwebAn Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet...CVE-2026-240177.3 High
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreAn improper restriction of excessive authentication attempts vulnerability in Fortinet...CVE-2026-226293.4 Low
- fortinet fortianalyzer, fortimanager, fortianalyzer cloud +1 more +3 moreA improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,...CVE-2025-684826.3 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer...CVE-2025-484186.4 Medium
- fortinet fortianalyzer, fortimanager, fortimanager cloud +2 moreAn authentication bypass using an alternate path or channel vulnerability in Fortinet...CVE-2026-225726.8 Medium
- fortinet fortianalyzer, fortianalyzer-bigdata, fortianalyzer big data +2 moreAn improper neutralization of special elements used in an sql command ('sql injection')...CVE-2025-497845.6 Medium
- fortinet fortideceptorAn improper neutralization of argument delimiters in a command ('argument injection')...CVE-2026-256896.0 Medium
- fortinet fortianalyzer, fortianalyzer cloud, fortimanager +1 more +3 moreA use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0...CVE-2025-686486.5 Medium
- fortinet forticlient, forticlientlinux +1 moreA UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through...CVE-2026-24018Public exploit7.4 High
- Show moreLoading…