# cve.now: Fortinet

The newest entries affecting Fortinet (up to 200). Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-106174](https://cve.now/CVE-2026-106174.md): A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network a (CVSS 6.7, Fortinet FortiOS)
- [CVE-2026-107656](https://cve.now/CVE-2026-107656.md): An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 t (CVSS 9.6, Fortinet FortiSandbox)
- [CVE-2026-106175](https://cve.now/CVE-2026-106175.md): A Double Free vulnerability \[CWE-415\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versi (CVSS 2.1, Fortinet FortiOS · Fortinet FortiSwitch +1)
- [CVE-2026-106172](https://cve.now/CVE-2026-106172.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSan (CVSS 4.9, Fortinet FortiSandbox)
- [CVE-2026-23707](https://cve.now/CVE-2026-23707.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.5, Fortinet FortiManager Cloud · Fortinet FortiAnalyzer Clo… +2)
- [CVE-2026-23706](https://cve.now/CVE-2026-23706.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 5.9, Fortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer +1)
- [CVE-2026-23705](https://cve.now/CVE-2026-23705.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.5, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-46773](https://cve.now/CVE-2025-46773.md): An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.9, Fortinet FortiAnalyzer Cloud · Fortinet FortiAnalyzer)
- [CVE-2025-57739](https://cve.now/CVE-2025-57739.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.7, Fortinet FortiMail)
- [CVE-2026-106170](https://cve.now/CVE-2026-106170.md): An Uncaught Exception vulnerability \[CWE-248\] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, (CVSS 4.8, Fortinet FortiSandbox)
- [CVE-2026-106173](https://cve.now/CVE-2026-106173.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacke (CVSS 9.4, Fortinet FortiSIEM)
- [CVE-2026-106176](https://cve.now/CVE-2026-106176.md): A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially (CVSS 3.4, Fortinet FortiSIEM)
- [CVE-2026-106171](https://cve.now/CVE-2026-106171.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, F (CVSS 5.3, Fortinet FortiManager)
- [CVE-2026-104286](https://cve.now/CVE-2026-104286.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, F (CVSS 9.8, KEV, Fortinet FortiMail)
- [CVE-2026-84388](https://cve.now/CVE-2026-84388.md): A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome (CVSS 9.1, Fortinet FortiPAM Chrome Extension)
- [CVE-2026-84390](https://cve.now/CVE-2026-84390.md): A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7 (CVSS 9.6, Fortinet FortiMonitorOnSight)
- [CVE-2026-84392](https://cve.now/CVE-2026-84392.md): A NULL Pointer Dereference vulnerability \[CWE-476\] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 (CVSS 2.5, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2026-22575](https://cve.now/CVE-2026-22575.md): An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 a (CVSS 4.7, Fortinet FortiManager)
- [CVE-2026-84391](https://cve.now/CVE-2026-84391.md): A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via \<ins (CVSS 5.9, Fortinet FortiAnalyzer)
- [CVE-2026-84393](https://cve.now/CVE-2026-84393.md): A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6. (CVSS 7.3, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2026-26084](https://cve.now/CVE-2026-26084.md): A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5 (CVSS 8.9, Fortinet FortiSandbox PaaS · Fortinet FortiSandbox)
- [CVE-2026-84385](https://cve.now/CVE-2026-84385.md): A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7 (CVSS 4.9, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2026-84389](https://cve.now/CVE-2026-84389.md): A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 (CVSS 2.8, Fortinet FortiSIEM)
- [CVE-2026-84387](https://cve.now/CVE-2026-84387.md): An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability \[CWE-77\] vulnerability in Fortinet Fort (CVSS 6.7, Fortinet FortiSandbox)
- [CVE-2026-84386](https://cve.now/CVE-2026-84386.md): A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attac (CVSS 4.7, Fortinet FortiClientWindows)
- [CVE-2026-70468](https://cve.now/CVE-2026-70468.md): A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, F (CVSS 7.3, Fortinet FortiManager)
- [CVE-2026-26035](https://cve.now/CVE-2026-26035.md): An Improper Authentication vulnerability \[CWE-287\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, For (CVSS 8.8, Fortinet FortiWeb)
- [CVE-2026-70466](https://cve.now/CVE-2026-70466.md): A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 al (CVSS 4.8, Fortinet FortiWeb · Fortinet FortiOS)
- [CVE-2026-71407](https://cve.now/CVE-2026-71407.md): A Stack-based Buffer Overflow vulnerability \[CWE-121\] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated att (CVSS 5.1, Fortinet FortiOS · Fortinet FortiPAM +1)
- [CVE-2026-70467](https://cve.now/CVE-2026-70467.md): A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5 (CVSS 3.4, Fortinet FortiSIEM)
- [CVE-2026-71408](https://cve.now/CVE-2026-71408.md): A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, Fort (CVSS 5.0, Fortinet FortiOS)
- [CVE-2026-70465](https://cve.now/CVE-2026-70465.md): A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, F (CVSS 7.3, Fortinet FortiClientWindows)
- [CVE-2026-59838](https://cve.now/CVE-2026-59838.md): A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 t (CVSS 5.3, Fortinet FortiSIEM)
- [CVE-2026-59840](https://cve.now/CVE-2026-59840.md): A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 (CVSS 4.1, Fortinet FortiOS · Fortinet FortiPAM +2)
- [CVE-2025-43892](https://cve.now/CVE-2025-43892.md): A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 (CVSS 4.1, Fortinet FortiOS)
- [CVE-2026-23573](https://cve.now/CVE-2026-23573.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 6.1, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2026-59839](https://cve.now/CVE-2026-59839.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, Fort (CVSS 5.0, Fortinet FortiProxy · Fortinet FortiOS +1)
- [CVE-2025-62826](https://cve.now/CVE-2025-62826.md): An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability \[CWE-113\] vulnerability in Fortinet F (CVSS 3.1, Fortinet FortiPAM · Fortinet FortiProxy +1)
- [CVE-2025-62675](https://cve.now/CVE-2025-62675.md): An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability \[CWE-113\] vulnerability in Fortinet F (CVSS 3.4, Fortinet FortiOS · Fortinet FortiPAM +1)
- [CVE-2026-59836](https://cve.now/CVE-2026-59836.md): A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiCli (CVSS 6.7, Fortinet FortiClientEMS)
- [CVE-2026-59841](https://cve.now/CVE-2026-59841.md): A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 ma (CVSS 6.9, Fortinet FortiSIEMWindowsAgent)
- [CVE-2025-53379](https://cve.now/CVE-2025-53379.md): A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remot (CVSS 7.0, Fortinet FortiAuthenticator)
- [CVE-2026-59835](https://cve.now/CVE-2026-59835.md): A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allo (CVSS 7.7, Fortinet FortiSandbox)
- [CVE-2026-59837](https://cve.now/CVE-2026-59837.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, For (CVSS 5.9, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2025-67862](https://cve.now/CVE-2025-67862.md): An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability \[CWE-1244\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6 (CVSS 6.0, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2026-25089](https://cve.now/CVE-2026-25089.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 th (CVSS 9.1, KEV, Fortinet FortiSandbox)
- [CVE-2026-49938](https://cve.now/CVE-2026-49938.md): A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all ve (CVSS 6.2, Fortinet FortiPortal)
- [CVE-2025-53870](https://cve.now/CVE-2025-53870.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 throug (CVSS 6.5, Fortinet FortiAP · Fortinet FortiAP-W2)
- [CVE-2025-53680](https://cve.now/CVE-2025-53680.md): An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 6.1, Fortinet FortiAP-U · Fortinet FortiAP-W2 +1)
- [CVE-2025-67604](https://cve.now/CVE-2025-67604.md): A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, Fort (CVSS 5.2, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-53681](https://cve.now/CVE-2025-53681.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability \[CWE-89\] vulnerability in Fortinet Fo (CVSS 6.3, Fortinet FortiMail)
- [CVE-2026-25690](https://cve.now/CVE-2026-25690.md): An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through (CVSS 4.0, Fortinet FortiDeceptor)
- [CVE-2025-53844](https://cve.now/CVE-2025-53844.md): A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allow (CVSS 8.3, Fortinet FortiOS)
- [CVE-2026-44279](https://cve.now/CVE-2026-44279.md): An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all (CVSS 5.0, Fortinet FortiTokenAndroid)
- [CVE-2026-44278](https://cve.now/CVE-2026-44278.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions (CVSS 2.1, Fortinet FortiClientWindows)
- [CVE-2026-25088](https://cve.now/CVE-2026-25088.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6 (CVSS 5.1, Fortinet FortiNDR)
- [CVE-2026-44277](https://cve.now/CVE-2026-44277.md): A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6 (CVSS 9.1, Fortinet FortiAuthenticator)
- [CVE-2026-26083](https://cve.now/CVE-2026-26083.md): A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0 (CVSS 9.1, Fortinet FortiSandbox)
- [CVE-2026-40688](https://cve.now/CVE-2026-40688.md): An out-of-bounds write vulnerability \[CWE-787\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWe (CVSS 6.7, Fortinet FortiWeb)
- [CVE-2025-61624](https://cve.now/CVE-2025-61624.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') \[CWE-22\] vulnerability in Fortinet FortiOS 7.6.0 through 7 (CVSS 5.4, KEV, Fortinet FortiOS · Fortinet FortiProxy +2)
- [CVE-2025-68649](https://cve.now/CVE-2025-68649.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6. (CVSS 5.4, Fortinet FortiManager Cloud · Fortinet FortiManager +1)
- [CVE-2026-21741](https://cve.now/CVE-2026-21741.md): An URL Redirection to Untrusted Site ('Open Redirect') vulnerability \[CWE-601\] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, For (CVSS 2.2, Fortinet FortiNAC-F)
- [CVE-2026-39813](https://cve.now/CVE-2026-39813.md): A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attack (CVSS 9.1, Fortinet FortiSandbox)
- [CVE-2025-61848](https://cve.now/CVE-2025-61848.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 throug (CVSS 6.5, Fortinet FortiManager · Fortinet FortiAnalyzer +1)
- [CVE-2026-22828](https://cve.now/CVE-2026-22828.md): A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may a (CVSS 7.3, Fortinet FortiAnalyzer Cloud · Fortinet FortiManager Cloud)
- [CVE-2026-39815](https://cve.now/CVE-2026-39815.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7 (CVSS 7.9, Fortinet FortiDDoS-F)
- [CVE-2026-22573](https://cve.now/CVE-2026-22573.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6 (CVSS 6.2, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2025-61886](https://cve.now/CVE-2025-61886.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 4.9, Fortinet FortiSandbox PaaS · Fortinet FortiSandbox)
- [CVE-2026-39810](https://cve.now/CVE-2026-39810.md): A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclos (CVSS 5.2, Fortinet FortiClientEMS)
- [CVE-2026-39811](https://cve.now/CVE-2026-39811.md): A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all vers (CVSS 4.4, Fortinet FortiWeb)
- [CVE-2024-23104](https://cve.now/CVE-2024-23104.md): An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiN (CVSS 5.4, Fortinet FortiVoice · Fortinet FortiNDR)
- [CVE-2026-39812](https://cve.now/CVE-2026-39812.md): A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through (CVSS 4.3, Fortinet FortiSandbox)
- [CVE-2026-23708](https://cve.now/CVE-2026-23708.md): A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-pre (CVSS 6.7, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-39814](https://cve.now/CVE-2026-39814.md): Multiple Relative Path Traversal vulnerabilities \[CWE-23\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6 (CVSS 6.2, Fortinet FortiWeb)
- [CVE-2026-25691](https://cve.now/CVE-2026-25691.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, (CVSS 6.2, Fortinet FortiSandbox PaaS · Fortinet FortiSandbox Cloud +1)
- [CVE-2025-59809](https://cve.now/CVE-2025-59809.md): A server-side request forgery (ssrf) vulnerability \[CWE-918\] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7. (CVSS 4.1, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2026-22155](https://cve.now/CVE-2026-22155.md): A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through (CVSS 6.2, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-21742](https://cve.now/CVE-2026-21742.md): A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through (CVSS 5.4, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2026-22574](https://cve.now/CVE-2026-22574.md): A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 (CVSS 4.1, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-22154](https://cve.now/CVE-2026-22154.md): An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 throu (CVSS 4.4, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2025-53847](https://cve.now/CVE-2025-53847.md): A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7 (CVSS 6.2, Fortinet FortiOS)
- [CVE-2026-22576](https://cve.now/CVE-2026-22576.md): A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2 (CVSS 4.1, Fortinet FortiSOAR PaaS · Fortinet FortiSOAR on-premise)
- [CVE-2026-27316](https://cve.now/CVE-2026-27316.md): A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandb (CVSS 2.5, Fortinet FortiSandbox)
- [CVE-2026-39808](https://cve.now/CVE-2026-39808.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 th (CVSS 9.1, KEV, Fortinet FortiSandbox)
- [CVE-2026-39809](https://cve.now/CVE-2026-39809.md): A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 throug (CVSS 6.2, Fortinet FortiClientEMS)
- [CVE-2026-35616](https://cve.now/CVE-2026-35616.md): A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unau (CVSS 9.1, KEV, Fortinet FortiClientEMS)
- [CVE-2025-66178](https://cve.now/CVE-2025-66178.md): A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 throug (CVSS 6.7, Fortinet FortiWeb)
- [CVE-2026-24641](https://cve.now/CVE-2026-24641.md): A NULL Pointer Dereference vulnerability \[CWE-476\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, For (CVSS 2.5, Fortinet FortiWeb)
- [CVE-2026-24640](https://cve.now/CVE-2026-24640.md): A Stack-based Buffer Overflow vulnerability \[CWE-121\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, (CVSS 5.9, Fortinet FortiWeb)
- [CVE-2025-54659](https://cve.now/CVE-2025-54659.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] vulnerability in Fortinet FortiSOAR (CVSS 5.5, Fortinet FortiSOAR Agent Communication Bridge)
- [CVE-2026-24017](https://cve.now/CVE-2026-24017.md): An Improper Control of Interaction Frequency vulnerability \[CWE-799\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 (CVSS 7.3, Fortinet FortiWeb)
- [CVE-2026-25972](https://cve.now/CVE-2026-25972.md): An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM (CVSS 4.1, Fortinet FortiSIEM)
- [CVE-2026-22629](https://cve.now/CVE-2026-22629.md): An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 (CVSS 3.4, Fortinet FortiAnalyzer · Fortinet FortiManager Cloud +1)
- [CVE-2025-68482](https://cve.now/CVE-2025-68482.md): A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnaly (CVSS 6.3, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-48418](https://cve.now/CVE-2025-48418.md): A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 t (CVSS 6.4, Fortinet FortiAnalyzer · Fortinet FortiManager)
- [CVE-2025-49784](https://cve.now/CVE-2025-49784.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 throug (CVSS 5.6, Fortinet FortiAnalyzer-BigData · Fortinet FortiAnalyzer)
- [CVE-2026-22572](https://cve.now/CVE-2026-22572.md): An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 (CVSS 6.8, Fortinet FortiManager · Fortinet FortiAnalyzer)
- [CVE-2025-68648](https://cve.now/CVE-2025-68648.md): A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, (CVSS 6.5, Fortinet FortiManager Cloud · Fortinet FortiAnalyzer Clo… +2)
- [CVE-2026-25689](https://cve.now/CVE-2026-25689.md): An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDe (CVSS 6.0, Fortinet FortiDeceptor)
- [CVE-2025-53608](https://cve.now/CVE-2025-53608.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 4.6, Fortinet FortiSandbox)
- [CVE-2026-24018](https://cve.now/CVE-2026-24018.md): A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2. (CVSS 7.4, Fortinet FortiClientLinux)
- [CVE-2025-48840](https://cve.now/CVE-2025-48840.md): An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.8, FortiWeb 7.2 all (CVSS 5.0, Fortinet FortiWeb)
- [CVE-2026-22627](https://cve.now/CVE-2026-22627.md): A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 ma (CVSS 7.7, Fortinet FortiSwitchAXFixed)
- [CVE-2025-54820](https://cve.now/CVE-2025-54820.md): A Stack-based Buffer Overflow vulnerability \[CWE-121\] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through (CVSS 7.0, Fortinet FortiManager)
- [CVE-2025-55717](https://cve.now/CVE-2025-55717.md): A cleartext storage of sensitive information vulnerability \[CWE-312\] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4. (CVSS 3.8, Fortinet FortiVoice · Fortinet FortiMail +1)
- [CVE-2026-25836](https://cve.now/CVE-2026-25836.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5 (CVSS 6.7, Fortinet FortiSandbox Cloud · Fortinet FortiSandbox PaaS)
- [CVE-2026-30897](https://cve.now/CVE-2026-30897.md): A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7 (CVSS 5.9, Fortinet FortiWeb)
- [CVE-2026-22628](https://cve.now/CVE-2026-22628.md): An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute syst (CVSS 5.1, Fortinet FortiSwitchAXFixed)
- [CVE-2025-62439](https://cve.now/CVE-2025-62439.md): An Improper Verification of Source of a Communication Channel vulnerability \[CWE-940\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, (CVSS 3.8, Fortinet FortiOS)
- [CVE-2025-62676](https://cve.now/CVE-2025-62676.md): An Improper Link Resolution Before File Access ('Link Following') vulnerability \[CWE-59\] vulnerability in Fortinet FortiClientWindows 7.4.0 (CVSS 6.4, Fortinet FortiClientWindows)
- [CVE-2025-68686](https://cve.now/CVE-2025-68686.md): An Exposure of Sensitive Information to an Unauthorized Actor vulnerability \[CWE-200\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, (CVSS 5.3, KEV, Fortinet FortiOS)
- [CVE-2025-64157](https://cve.now/CVE-2025-64157.md): A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 (CVSS 6.7, Fortinet FortiOS)
- [CVE-2025-55018](https://cve.now/CVE-2025-55018.md): An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7. (CVSS 5.2, Fortinet FortiOS)
- [CVE-2026-22153](https://cve.now/CVE-2026-22153.md): An Authentication Bypass by Primary Weakness vulnerability \[CWE-305\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unau (CVSS 7.5, Fortinet FortiOS)
- [CVE-2026-21743](https://cve.now/CVE-2026-21743.md): A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenti (CVSS 6.8, Fortinet FortiAuthenticator)
- [CVE-2025-52436](https://cve.now/CVE-2025-52436.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 7.9, Fortinet FortiSandbox)
- [CVE-2026-21643](https://cve.now/CVE-2026-21643.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may a (CVSS 9.1, KEV, Fortinet FortiClientEMS)
- [CVE-2026-25815](https://cve.now/CVE-2026-25815.md): Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as exploited in the wild f (CVSS 3.2, Fortinet FortiOS)
- [CVE-2026-24858](https://cve.now/CVE-2026-24858.md): An Authentication Bypass Using an Alternate Path or Channel vulnerability \[CWE-288\] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7. (CVSS 9.4, KEV, Fortinet FortiWeb · Fortinet FortiNAC-F +4)
- [CVE-2025-25249](https://cve.now/CVE-2025-25249.md): A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1 (CVSS 7.4, KEV, Fortinet FortiSwitchManager · Fortinet FortiOS)
- [CVE-2025-47855](https://cve.now/CVE-2025-47855.md): An exposure of sensitive information to an unauthorized actor \[CWE-200\] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3 (CVSS 9.3, Fortinet FortiFone)
- [CVE-2025-67685](https://cve.now/CVE-2025-67685.md): A Server-Side Request Forgery (SSRF) vulnerability \[CWE-918\] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.4, FortiSandbox 4.4 al (CVSS 3.4, Fortinet FortiSandbox)
- [CVE-2025-58693](https://cve.now/CVE-2025-58693.md): An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, (CVSS 5.7, Fortinet FortiVoice)
- [CVE-2025-59922](https://cve.now/CVE-2025-59922.md): An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 6.8, Fortinet FortiClientEMS)
- [CVE-2025-64155](https://cve.now/CVE-2025-64155.md): An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, For (CVSS 9.4, Fortinet FortiSIEM)
- [CVE-2024-40593](https://cve.now/CVE-2024-40593.md): A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 al (CVSS 5.9, Fortinet FortiAnalyzer · Fortinet FortiPortal +2)
- [CVE-2024-47570](https://cve.now/CVE-2024-47570.md): An insertion of sensitive information into log file vulnerability \[CWE-532\] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all ver (CVSS 6.3, Fortinet FortiSASE · Fortinet FortiProxy +3)
- [CVE-2025-59718](https://cve.now/CVE-2025-59718.md): A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, Forti (CVSS 9.1, KEV, Fortinet FortiSwitchManager · Fortinet FortiOS +1)
- [CVE-2025-59719](https://cve.now/CVE-2025-59719.md): An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 t (CVSS 9.1, Fortinet FortiWeb)
- [CVE-2025-53679](https://cve.now/CVE-2025-53679.md): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 6.9, Fortinet FortiSandbox)
- [CVE-2025-54353](https://cve.now/CVE-2025-54353.md): An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability \[CWE-79\] vulnerability in Fortinet For (CVSS 5.3, Fortinet FortiSandbox)
- [CVE-2025-53949](https://cve.now/CVE-2025-53949.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 7.0, Fortinet FortiSandbox)
- [CVE-2025-59810](https://cve.now/CVE-2025-59810.md): An improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 through 7.5.1, FortiSOAR PaaS (CVSS 6.2, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2025-59808](https://cve.now/CVE-2025-59808.md): An unverified password change vulnerability \[CWE-620\] vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 thr (CVSS 6.5, Fortinet FortiSOAR on-premise · Fortinet FortiSOAR PaaS)
- [CVE-2025-54838](https://cve.now/CVE-2025-54838.md): An Incorrect Authorization vulnerability \[CWE-863\] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared (CVSS 6.4, Fortinet FortiPortal)
- [CVE-2025-62631](https://cve.now/CVE-2025-62631.md): An insufficient session expiration vulnerability \[CWE-613\] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 al (CVSS 5.3, Fortinet FortiOS)
- [CVE-2025-57823](https://cve.now/CVE-2025-57823.md): A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, (CVSS 2.6, Fortinet FortiAuthenticator)
- [CVE-2025-64153](https://cve.now/CVE-2025-64153.md): A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, (CVSS 6.7, Fortinet FortiExtender)
- [CVE-2025-59923](https://cve.now/CVE-2025-59923.md): An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthe (CVSS 2.6, Fortinet FortiAuthenticator)
- [CVE-2025-64156](https://cve.now/CVE-2025-64156.md): An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiVoice 7.2.0 through 7 (CVSS 6.8, Fortinet FortiVoice)
- [CVE-2025-64471](https://cve.now/CVE-2025-64471.md): A use of password hash instead of password for authentication vulnerability \[CWE-836\] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1 (CVSS 4.4, Fortinet FortiWeb)
- [CVE-2025-60024](https://cve.now/CVE-2025-60024.md): Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities \[CWE-22\] vulnerability in Fortinet (CVSS 7.7, Fortinet FortiVoice)
- [CVE-2025-64447](https://cve.now/CVE-2025-64447.md): A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 throu (CVSS 7.1, Fortinet FortiWeb)
- [CVE-2025-58412](https://cve.now/CVE-2025-58412.md): A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiADC 8.0.0, FortiADC 7.6.0 thr (CVSS 4.2, Fortinet FortiADC)
- [CVE-2025-53843](https://cve.now/CVE-2025-53843.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, (CVSS 6.9, Fortinet FortiOS)
- [CVE-2025-48839](https://cve.now/CVE-2025-48839.md): An Out-of-bounds Write vulnerability \[CWE-787\] in FortiADC 8.0.0, 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.1 all versio (CVSS 6.3, Fortinet FortiADC)
- [CVE-2025-54821](https://cve.now/CVE-2025-54821.md): An Improper Privilege Management vulnerability \[CWE-269\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11 (CVSS 1.7, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2025-58413](https://cve.now/CVE-2025-58413.md): A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, (CVSS 6.9, Fortinet FortiOS · Fortinet FortiSASE)
- [CVE-2025-46215](https://cve.now/CVE-2025-46215.md): An Improper Isolation or Compartmentalization vulnerability \[CWE-653\] in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 throu (CVSS 5.0, Fortinet FortiSandbox)
- [CVE-2025-59669](https://cve.now/CVE-2025-59669.md): A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 (CVSS 4.8, Fortinet FortiWeb)
- [CVE-2025-54660](https://cve.now/CVE-2025-54660.md): An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientW (CVSS 4.9, Fortinet FortiClientWindows)
- [CVE-2025-61713](https://cve.now/CVE-2025-61713.md): A Cleartext Storage of Sensitive Information in Memory vulnerability \[CWE-316\] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiP (CVSS 3.8, Fortinet FortiPAM)
- [CVE-2025-46776](https://cve.now/CVE-2025-46776.md): A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiE (CVSS 6.3, Fortinet FortiExtender)
- [CVE-2025-46775](https://cve.now/CVE-2025-46775.md): A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through (CVSS 5.2, Fortinet FortiExtender)
- [CVE-2025-54971](https://cve.now/CVE-2025-54971.md): An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiADC 7.4.0, FortiADC 7.2 all versions, FortiADC (CVSS 3.9, Fortinet FortiADC)
- [CVE-2025-54972](https://cve.now/CVE-2025-54972.md): An improper neutralization of crlf sequences ('crlf injection') vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 thr (CVSS 3.9, Fortinet FortiMail)
- [CVE-2025-46373](https://cve.now/CVE-2025-46373.md): A Heap-based Buffer Overflow vulnerability \[CWE-122\] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7. (CVSS 7.1, Fortinet FortiClientWindows)
- [CVE-2025-58692](https://cve.now/CVE-2025-58692.md): An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability \[CWE-89\] vulnerability in Fortinet For (CVSS 7.7, Fortinet FortiVoice)
- [CVE-2025-58034](https://cve.now/CVE-2025-58034.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability \[CWE-78\] vulnerability in Fortin (CVSS 6.7, KEV, Fortinet FortiWeb)
- [CVE-2025-47761](https://cve.now/CVE-2025-47761.md): An Exposed IOCTL with Insufficient Access Control vulnerability \[CWE-782\] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, (CVSS 7.1, Fortinet FortiClientWindows)
- [CVE-2025-64446](https://cve.now/CVE-2025-64446.md): A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 (CVSS 9.4, KEV, Fortinet FortiWeb)
- [CVE-2025-46752](https://cve.now/CVE-2025-46752.md): A insertion of sensitive information into log file in Fortinet FortiDLP 12.0.0 through 12.0.5, 11.5.1, 11.4.6, 11.4.5 allows attacker to inf (CVSS 4.2, Fortinet FortiDLP)
- [CVE-2025-53950](https://cve.now/CVE-2025-53950.md): An Exposure of Private Personal Information ('Privacy Violation') vulnerability \[CWE-359\] in Fortinet FortiDLP Agent's Outlookproxy plugin f (CVSS 5.1, Fortinet FortiDLP)
- [CVE-2025-53951](https://cve.now/CVE-2025-53951.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] in Fortinet FortiDLP Agent's Outloo (CVSS 4.9, Fortinet FortiDLP)
- [CVE-2025-54658](https://cve.now/CVE-2025-54658.md): An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability \[CWE-22\] in Fortinet FortiDLP Agent's Outloo (CVSS 7.2, Fortinet FortiDLP)
- [CVE-2025-31514](https://cve.now/CVE-2025-31514.md): A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS (CVSS 2.6, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2025-46774](https://cve.now/CVE-2025-46774.md): An Improper Verification of Cryptographic Signature vulnerability \[CWE-347\] in FortiClient MacOS installer version 7.4.2 and below, version (CVSS 6.8, Fortinet FortiClientMac)
- [CVE-2025-54822](https://cve.now/CVE-2025-54822.md): An improper authorization vulnerability \[CWE-285\] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiO (CVSS 4.2, Fortinet FortiProxy · Fortinet FortiOS)
- [CVE-2025-31365](https://cve.now/CVE-2025-31365.md): An Improper Control of Generation of Code ('Code Injection') vulnerability \[CWE-94\] in FortiClientMac 7.4.0 through 7.4.3, 7.2.1 through 7.2 (CVSS 5.5, Fortinet FortiClientMac)
- [CVE-2025-53845](https://cve.now/CVE-2025-53845.md): An improper authentication vulnerability \[CWE-287\] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthen (CVSS 6.2, Fortinet FortiAnalyzer)
- [CVE-2025-59921](https://cve.now/CVE-2025-59921.md): An exposure of sensitive information to an unauthorized actor vulnerability \[CWE-200\] in Fortinet FortiADC version 7.4.0, version 7.2.3 and (CVSS 6.2, Fortinet FortiADC)
- [CVE-2024-33507](https://cve.now/CVE-2024-33507.md): An insufficient session expiration vulnerability \[CWE-613\] and an incorrect authorization vulnerability \[CWE-863\] in FortiIsolator 2.4.0 thr (CVSS 7.0, Fortinet FortiIsolator)
- [CVE-2025-57716](https://cve.now/CVE-2025-57716.md): An Uncontrolled Search Path Element vulnerability \[CWE-427\] in FortiClient Windows 7.4.0 through 7.4.3, 7.2.0 through 7.2.11, 7.0 all versio (CVSS 6.0, Fortinet FortiClientWindows)
- [CVE-2025-25255](https://cve.now/CVE-2025-25255.md): An Improperly Implemented Security Check for Standard vulnerability \[CWE-358\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiPr (CVSS 4.8, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2025-25252](https://cve.now/CVE-2025-25252.md): An Insufficient Session Expiration vulnerability \[CWE-613\] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10 (CVSS 4.3, Fortinet FortiOS)
- [CVE-2024-26008](https://cve.now/CVE-2024-26008.md): An improper check or handling of exceptional conditions vulnerability \[CWE-703\] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, For (CVSS 5.0, Fortinet FortiProxy · Fortinet FortiPAM +2)
- [CVE-2024-47569](https://cve.now/CVE-2024-47569.md): A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, (CVSS 4.2, Fortinet FortiManager · Fortinet FortiOS +8)
- [CVE-2025-54973](https://cve.now/CVE-2025-54973.md): A concurrent execution using shared resource with improper synchronization ('Race Condition') vulnerability \[CWE-362\] in Fortinet FortiAnaly (CVSS 5.3, Fortinet FortiAnalyzer)
- [CVE-2023-46718](https://cve.now/CVE-2023-46718.md): A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 thr (CVSS 6.3, Fortinet FortiOS · Fortinet FortiProxy)
- [CVE-2024-50571](https://cve.now/CVE-2024-50571.md): A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7 (CVSS 6.5, Fortinet FortiManager · Fortinet FortiOS +2)
- [CVE-2025-31366](https://cve.now/CVE-2025-31366.md): An Improper Neutralization of Input During Web Page Generation vulnerability \[CWE-79\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, (CVSS 4.5, Fortinet FortiSASE · Fortinet FortiOS +1)
- [CVE-2025-22258](https://cve.now/CVE-2025-22258.md): A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2. (CVSS 5.7, Fortinet FortiPAM · Fortinet FortiOS +3)
- [CVE-2025-25253](https://cve.now/CVE-2025-25253.md): An Improper Validation of Certificate with Host Mismatch vulnerability \[CWE-297\] in FortiProxy version 7.6.1 and below, version 7.4.8 and be (CVSS 6.8, Fortinet FortiProxy · Fortinet FortiOS +1)
- [CVE-2025-57740](https://cve.now/CVE-2025-57740.md): An Heap-based Buffer Overflow vulnerability \[CWE-122\] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, (CVSS 6.7, Fortinet FortiPAM · Fortinet FortiProxy +1)
- [CVE-2025-47890](https://cve.now/CVE-2025-47890.md): An URL Redirection to Untrusted Site vulnerabilities \[CWE-601\] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through (CVSS 2.5, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2025-57741](https://cve.now/CVE-2025-57741.md): An Incorrect Permission Assignment for Critical Resource vulnerability \[CWE-732\] in FortiClientMac 7.4.0 through 7.4.3, 7.2.0 through 7.2.11 (CVSS 7.0, Fortinet FortiClientMac)
- [CVE-2025-49201](https://cve.now/CVE-2025-49201.md): A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all ve (CVSS 7.4, Fortinet FortiPAM · Fortinet FortiSwitchManager)
- [CVE-2025-58325](https://cve.now/CVE-2025-58325.md): An Incorrect Provision of Specified Functionality vulnerability \[CWE-684\] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 (CVSS 7.8, Fortinet FortiOS)
- [CVE-2025-58324](https://cve.now/CVE-2025-58324.md): An improper neutralization of input during web page generation vulnerability \[CWE-79\] in FortiSIEM 7.2.0 through 7.2.2, 7.1 all versions, 7. (CVSS 6.1, Fortinet FortiSIEM)
- [CVE-2025-58903](https://cve.now/CVE-2025-58903.md): An Unchecked Return Value vulnerability \[CWE-252\] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API allows an authenticat (CVSS 2.5, Fortinet FortiOS)
- [CVE-2024-48891](https://cve.now/CVE-2024-48891.md): An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability \[CWE-78\] in FortiSOAR 7.6.0 thro (CVSS 6.6, Fortinet FortiSOAR on-premise)
- [CVE-2025-47856](https://cve.now/CVE-2025-47856.md): Two improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities \[CWE-78\] in Fortinet FortiVoi (CVSS 7.2, Fortinet FortiVoice)
- [CVE-2025-22862](https://cve.now/CVE-2025-22862.md): An Authentication Bypass Using an Alternate Path or Channel vulnerability \[CWE-288\] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7. (CVSS 6.3, Fortinet FortiProxy · Fortinet FortiOS)
- [CVE-2024-45325](https://cve.now/CVE-2024-45325.md): An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities \[CWE-78\] in Fortinet FortiDDoS (CVSS 6.5, Fortinet FortiDDoS-F)
- [CVE-2025-53609](https://cve.now/CVE-2025-53609.md): A Relative Path Traversal vulnerability \[CWE-23\] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.2 through 7 (CVSS 4.7, Fortinet FortiWeb)
- [CVE-2024-48892](https://cve.now/CVE-2024-48892.md): A relative path traversal vulnerability \[CWE-23\] in FortiSOAR 7.6.0, 7.5.0 through 7.5.1, 7.4 all versions, 7.3 all versions may allow an au (CVSS 6.4, Fortinet FortiSOAR)
- [CVE-2024-48884](https://cve.now/CVE-2024-48884.md): A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, (CVSS 6.7, Fortinet FortiOS · Fortinet FortiProxy +1)
- [CVE-2023-36640](https://cve.now/CVE-2023-36640.md): A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, (CVSS 6.2, Fortinet FortiOS · Fortinet FortiPAM +1)
- [CVE-2023-45583](https://cve.now/CVE-2023-45583.md): A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, (CVSS 6.2, Fortinet FortiOS · Fortinet FortiProxy +2)
- [CVE-2023-29178](https://cve.now/CVE-2023-29178.md): A access of uninitialized pointer vulnerability \[CWE-824\] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.1 (CVSS 3.9, Fortinet FortiOS · Fortinet FortiProxy)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/tech/fortinet
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.