| CVE-2025-25249 |
Exploited
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
|
7.4
High
|
Jan 13, 2026 |
| CVE-2024-40593 |
A key management errors vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.2, FortiAnalyzer 7.2.0 through…
|
5.9
Medium
|
Dec 11, 2025 |
| CVE-2024-47570 |
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0…
|
6.3
Medium
|
Dec 9, 2025 |
| CVE-2025-59718 |
Exploited
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
|
9.1
Critical
|
Dec 9, 2025 |
| CVE-2025-62631 |
An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all…
|
5.3
Medium
|
Dec 9, 2025 |
| CVE-2025-53843 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8,…
|
6.9
Medium
|
Nov 18, 2025 |
| CVE-2025-58413 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8,…
|
6.9
Medium
|
Nov 18, 2025 |
| CVE-2025-54821 |
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,…
|
1.7
Low
|
Nov 18, 2025 |
| CVE-2025-31514 |
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4…
|
2.6
Low
|
Oct 14, 2025 |
| CVE-2025-54822 |
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2025-25255 |
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0…
|
4.8
Medium
|
Oct 14, 2025 |
| CVE-2025-25252 |
An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through…
|
4.3
Medium
|
Oct 14, 2025 |
| CVE-2024-26008 |
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3…
|
5.0
Medium
|
Oct 14, 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2023-46718 |
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0…
|
6.3
Medium
|
Oct 14, 2025 |
| CVE-2024-50571 |
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through…
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-31366 |
An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet…
|
4.5
Medium
|
Oct 14, 2025 |
| CVE-2025-25253 |
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and…
|
6.8
Medium
|
Oct 14, 2025 |
| CVE-2025-22258 |
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0…
|
5.7
Medium
|
Oct 14, 2025 |
| CVE-2025-57740 |
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below,…
|
6.7
Medium
|
Oct 14, 2025 |
| CVE-2025-47890 |
An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,…
|
2.5
Low
|
Oct 14, 2025 |
| CVE-2025-58325 |
An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5…
|
7.8
High
|
Oct 14, 2025 |
| CVE-2025-58903 |
An Unchecked Return Value vulnerability [CWE-252] in Fortinet FortiOS version 7.6.0 through 7.6.3 and before 7.4.8 API…
|
2.5
Low
|
Oct 14, 2025 |
| CVE-2025-22862 |
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7,…
|
6.3
Medium
|
Oct 2, 2025 |
| CVE-2024-26009 |
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through…
|
7.9
High
|
Aug 12, 2025 |