| CVE-2026-106174 |
A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated…
|
6.7
Moyenne
|
27 oct. 2026 |
| CVE-2026-106175 |
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
|
2.1
Faible
|
13 oct. 2026 |
| CVE-2026-84392 |
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
|
2.5
Faible
|
8 sept. 2026 |
| CVE-2026-84393 |
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
|
7.3
Élevée
|
8 sept. 2026 |
| CVE-2026-70466 |
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
|
4.8
Moyenne
|
12 août 2026 |
| CVE-2026-71407 |
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an…
|
5.1
Moyenne
|
12 août 2026 |
| CVE-2026-71408 |
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS…
|
5.0
Moyenne
|
12 août 2026 |
| CVE-2025-43892 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Moyenne
|
14 juil. 2026 |
| CVE-2026-59840 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Moyenne
|
14 juil. 2026 |
| CVE-2026-23573 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
6.1
Moyenne
|
14 juil. 2026 |
| CVE-2025-62826 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.1
Faible
|
14 juil. 2026 |
| CVE-2026-59839 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0…
|
5.0
Moyenne
|
14 juil. 2026 |
| CVE-2025-62675 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.4
Faible
|
14 juil. 2026 |
| CVE-2026-59837 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS…
|
5.9
Moyenne
|
14 juil. 2026 |
| CVE-2025-67862 |
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet…
|
6.0
Moyenne
|
9 juin 2026 |
| CVE-2025-53844 |
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS…
|
8.3
Élevée
|
12 mai 2026 |
| CVE-2025-61624 |
Exploitée
Fortinet Multiple Products Path Traversal Vulnerability
|
5.4
Moyenne
|
14 avr. 2026 |
| CVE-2025-53847 |
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0…
|
6.2
Moyenne
|
14 avr. 2026 |
| CVE-2025-68686 |
Exploitée
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
|
5.3
Moyenne
|
10 févr. 2026 |
| CVE-2025-55018 |
An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0,…
|
5.2
Moyenne
|
10 févr. 2026 |
| CVE-2025-62439 |
An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet…
|
3.8
Faible
|
10 févr. 2026 |
| CVE-2026-22153 |
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through…
|
7.5
Élevée
|
10 févr. 2026 |
| CVE-2025-64157 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…
|
6.7
Moyenne
|
10 févr. 2026 |
| CVE-2026-25815 |
Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as…
|
3.2
Faible
|
5 févr. 2026 |
| CVE-2026-24858 |
Exploitée
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critique
|
27 janv. 2026 |