| CVE-2026-26035 |
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
8.8
High
|
Aug 12, 2026 |
| CVE-2026-70466 |
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
|
4.8
Medium
|
Aug 12, 2026 |
| CVE-2026-40688 |
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0…
|
6.7
Medium
|
Apr 14, 2026 |
| CVE-2026-39811 |
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
|
4.4
Medium
|
Apr 14, 2026 |
| CVE-2026-39814 |
Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,…
|
6.2
Medium
|
Apr 14, 2026 |
| CVE-2025-66178 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
6.7
Medium
|
Mar 10, 2026 |
| CVE-2026-24641 |
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
2.5
Low
|
Mar 10, 2026 |
| CVE-2026-24640 |
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
5.9
Medium
|
Mar 10, 2026 |
| CVE-2026-24017 |
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through…
|
7.3
High
|
Mar 10, 2026 |
| CVE-2025-48840 |
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through…
|
5.0
Medium
|
Mar 10, 2026 |
| CVE-2026-30897 |
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
|
5.9
Medium
|
Mar 10, 2026 |
| CVE-2026-24858 |
Exploited
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critical
|
Jan 27, 2026 |
| CVE-2025-59719 |
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…
|
9.1
Critical
|
Dec 9, 2025 |
| CVE-2025-64471 |
A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb…
|
4.4
Medium
|
Dec 9, 2025 |
| CVE-2025-64447 |
A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through…
|
7.1
High
|
Dec 9, 2025 |
| CVE-2025-59669 |
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all…
|
4.8
Medium
|
Nov 18, 2025 |
| CVE-2025-58034 |
Exploited
Fortinet FortiWeb OS Command Injection Vulnerability
|
6.7
Medium
|
Nov 18, 2025 |
| CVE-2025-64446 |
Exploited
Fortinet FortiWeb Path Traversal Vulnerability
|
9.4
Critical
|
Nov 14, 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2025-53609 |
A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through…
|
4.7
Medium
|
Sep 9, 2025 |
| CVE-2025-47857 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in…
|
6.5
Medium
|
Aug 12, 2025 |
| CVE-2025-27759 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.7
Medium
|
Aug 12, 2025 |
| CVE-2025-52970 |
A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through…
|
7.7
High
|
Aug 12, 2025 |
| CVE-2025-32766 |
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before…
|
6.3
Medium
|
Aug 12, 2025 |
| CVE-2025-25257 |
Exploited
Fortinet FortiWeb SQL Injection Vulnerability
|
9.6
Critical
|
Jul 17, 2025 |