| CVE-2025-53379 |
A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all…
|
7.0
High
|
Jul 14, 2026 |
| CVE-2026-44277 |
A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0,…
|
9.1
Critical
|
May 12, 2026 |
| CVE-2026-21743 |
A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all…
|
6.8
Medium
|
Feb 10, 2026 |
| CVE-2025-59923 |
An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5…
|
2.6
Low
|
Dec 9, 2025 |
| CVE-2025-57823 |
A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6,…
|
2.6
Low
|
Dec 9, 2025 |
| CVE-2022-23439 |
A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison…
|
4.1
Medium
|
Jan 22, 2025 |
| CVE-2024-23664 |
A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and…
|
5.8
Medium
|
Jun 3, 2024 |
| CVE-2022-22302 |
A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1,…
|
5.3
Medium
|
Jul 11, 2023 |
| CVE-2022-35850 |
An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator…
|
4.2
Medium
|
Apr 11, 2023 |
| CVE-2023-26208 |
A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x…
|
3.5
Low
|
Mar 9, 2023 |
| CVE-2021-24005 |
Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in FortiAuthenticator versions…
|
4.0
Medium
|
Jul 6, 2021 |