| CVE-2026-24858 |
Exploited
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critical
|
Jan 27, 2026 |
| CVE-2025-59719 |
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…
|
9.1
Critical
|
Dec 9, 2025 |
| CVE-2025-64446 |
Exploited
Fortinet FortiWeb Path Traversal Vulnerability
|
9.4
Critical
|
Nov 14, 2025 |
| CVE-2025-25257 |
Exploited
Fortinet FortiWeb SQL Injection Vulnerability
|
9.6
Critical
|
Jul 17, 2025 |
| CVE-2023-25610 |
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0…
|
9.3
Critical
|
Mar 24, 2025 |
| CVE-2021-42756 |
Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions, 6.0.7…
|
9.3
Critical
|
Feb 16, 2023 |