| CVE-2026-106174 |
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated…
|
6.7
Medium
|
Oct 27, 2026 |
| CVE-2026-106175 |
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
|
2.1
Low
|
Oct 13, 2026 |
| CVE-2026-84392 |
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
|
2.5
Low
|
Sep 8, 2026 |
| CVE-2026-84393 |
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
|
7.3
High
|
Sep 8, 2026 |
| CVE-2026-70466 |
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
|
4.8
Medium
|
Aug 12, 2026 |
| CVE-2026-71407 |
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an…
|
5.1
Medium
|
Aug 12, 2026 |
| CVE-2026-71408 |
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS…
|
5.0
Medium
|
Aug 12, 2026 |
| CVE-2025-43892 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Medium
|
Jul 14, 2026 |
| CVE-2026-59840 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Medium
|
Jul 14, 2026 |
| CVE-2026-23573 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
6.1
Medium
|
Jul 14, 2026 |
| CVE-2025-62826 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.1
Low
|
Jul 14, 2026 |
| CVE-2026-59839 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0…
|
5.0
Medium
|
Jul 14, 2026 |
| CVE-2025-62675 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.4
Low
|
Jul 14, 2026 |
| CVE-2026-59837 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS…
|
5.9
Medium
|
Jul 14, 2026 |
| CVE-2025-67862 |
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet…
|
6.0
Medium
|
Jun 9, 2026 |
| CVE-2025-53844 |
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS…
|
8.3
High
|
May 12, 2026 |
| CVE-2025-61624 |
Exploited
Fortinet Multiple Products Path Traversal Vulnerability
|
5.4
Medium
|
Apr 14, 2026 |
| CVE-2025-53847 |
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2025-68686 |
Exploited
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
|
5.3
Medium
|
Feb 10, 2026 |
| CVE-2025-55018 |
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0,…
|
5.2
Medium
|
Feb 10, 2026 |
| CVE-2025-62439 |
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet…
|
3.8
Low
|
Feb 10, 2026 |
| CVE-2026-22153 |
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through…
|
7.5
High
|
Feb 10, 2026 |
| CVE-2025-64157 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…
|
6.7
Medium
|
Feb 10, 2026 |
| CVE-2026-25815 |
Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as…
|
3.2
Low
|
Feb 5, 2026 |
| CVE-2026-24858 |
Exploited
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critical
|
Jan 27, 2026 |