| CVE-2026-26035 |
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
8.8
Élevée
|
12 août 2026 |
| CVE-2026-70466 |
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through…
|
4.8
Moyenne
|
12 août 2026 |
| CVE-2026-40688 |
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0…
|
6.7
Moyenne
|
14 avr. 2026 |
| CVE-2026-39811 |
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
|
4.4
Moyenne
|
14 avr. 2026 |
| CVE-2026-39814 |
Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2,…
|
6.2
Moyenne
|
14 avr. 2026 |
| CVE-2025-66178 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
|
6.7
Moyenne
|
10 mars 2026 |
| CVE-2026-24641 |
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
2.5
Faible
|
10 mars 2026 |
| CVE-2026-24640 |
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb…
|
5.9
Moyenne
|
10 mars 2026 |
| CVE-2026-24017 |
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through…
|
7.3
Élevée
|
10 mars 2026 |
| CVE-2025-48840 |
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through…
|
5.0
Moyenne
|
10 mars 2026 |
| CVE-2026-30897 |
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6,…
|
5.9
Moyenne
|
10 mars 2026 |
| CVE-2026-24858 |
Exploitée
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critique
|
27 janv. 2026 |
| CVE-2025-59719 |
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…
|
9.1
Critique
|
9 déc. 2025 |
| CVE-2025-64471 |
A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWeb…
|
4.4
Moyenne
|
9 déc. 2025 |
| CVE-2025-64447 |
A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through…
|
7.1
Élevée
|
9 déc. 2025 |
| CVE-2025-59669 |
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all…
|
4.8
Moyenne
|
18 nov. 2025 |
| CVE-2025-58034 |
Exploitée
Fortinet FortiWeb OS Command Injection Vulnerability
|
6.7
Moyenne
|
18 nov. 2025 |
| CVE-2025-64446 |
Exploitée
Fortinet FortiWeb Path Traversal Vulnerability
|
9.4
Critique
|
14 nov. 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Moyenne
|
14 oct. 2025 |
| CVE-2025-53609 |
A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through…
|
4.7
Moyenne
|
9 sept. 2025 |
| CVE-2025-47857 |
A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in…
|
6.5
Moyenne
|
12 août 2025 |
| CVE-2025-27759 |
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
|
6.7
Moyenne
|
12 août 2025 |
| CVE-2025-52970 |
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions…
|
7.7
Élevée
|
12 août 2025 |
| CVE-2025-32766 |
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before…
|
6.3
Moyenne
|
12 août 2025 |
| CVE-2025-25257 |
Exploitée
Fortinet FortiWeb SQL Injection Vulnerability
|
9.6
Critique
|
17 juil. 2025 |