Skip to content

Known vulnerabilities in Fortinet FortiDeceptor

Is your version affected?

CVE Summary Score Published
CVE-2026-25690 An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… 4.0 Medium May 12, 2026
CVE-2026-25689 An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet… 6.0 Medium Mar 10, 2026
CVE-2024-35280 A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet… 5.1 Medium Jan 15, 2025
CVE-2024-45326 An Improper Access Control vulnerability [CWE-284] vulnerability in Fortinet FortiDeceptor 6.0.0, FortiDeceptor 5.3… 3.9 Low Jan 14, 2025
CVE-2022-27487 A improper privilege management in Fortinet FortiSandbox version 4.2.0 through 4.2.2, 4.0.0 through 4.0.2 and before… 8.3 High Apr 11, 2023
CVE-2023-26209 A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x… 3.5 Low Mar 9, 2023
CVE-2022-30305 An insufficient logging [CWE-778] vulnerability in FortiSandbox versions 4.0.0 to 4.0.2, 3.2.0 to 3.2.3 and 3.1.0 to… 3.6 Low Dec 6, 2022

Other Fortinet products