| CVE-2026-106175 |
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,…
|
2.1
Low
|
Oct 13, 2026 |
| CVE-2026-84392 |
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all…
|
2.5
Low
|
Sep 8, 2026 |
| CVE-2026-84393 |
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6,…
|
7.3
High
|
Sep 8, 2026 |
| CVE-2026-71407 |
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an…
|
5.1
Medium
|
Aug 12, 2026 |
| CVE-2026-59840 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Medium
|
Jul 14, 2026 |
| CVE-2026-23573 |
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79]…
|
6.1
Medium
|
Jul 14, 2026 |
| CVE-2025-62826 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.1
Low
|
Jul 14, 2026 |
| CVE-2026-59839 |
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0…
|
5.0
Medium
|
Jul 14, 2026 |
| CVE-2025-62675 |
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113]…
|
3.4
Low
|
Jul 14, 2026 |
| CVE-2026-59837 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS…
|
5.9
Medium
|
Jul 14, 2026 |
| CVE-2025-67862 |
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet…
|
6.0
Medium
|
Jun 9, 2026 |
| CVE-2025-61624 |
Exploited
Fortinet Multiple Products Path Traversal Vulnerability
|
5.4
Medium
|
Apr 14, 2026 |
| CVE-2026-24858 |
Exploited
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
|
9.4
Critical
|
Jan 27, 2026 |
| CVE-2024-47570 |
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0…
|
6.3
Medium
|
Dec 9, 2025 |
| CVE-2025-59718 |
Exploited
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
|
9.1
Critical
|
Dec 9, 2025 |
| CVE-2025-54821 |
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3,…
|
1.7
Low
|
Nov 18, 2025 |
| CVE-2025-31514 |
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4…
|
2.6
Low
|
Oct 14, 2025 |
| CVE-2025-54822 |
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2025-25255 |
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0…
|
4.8
Medium
|
Oct 14, 2025 |
| CVE-2024-26008 |
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3…
|
5.0
Medium
|
Oct 14, 2025 |
| CVE-2024-47569 |
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail…
|
4.2
Medium
|
Oct 14, 2025 |
| CVE-2023-46718 |
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0…
|
6.3
Medium
|
Oct 14, 2025 |
| CVE-2024-50571 |
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through…
|
6.5
Medium
|
Oct 14, 2025 |
| CVE-2025-31366 |
An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet…
|
4.5
Medium
|
Oct 14, 2025 |
| CVE-2025-25253 |
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and…
|
6.8
Medium
|
Oct 14, 2025 |