Skip to content

Known vulnerabilities in Fortinet FortiSwitch

Is your version affected?

CVE Summary Score Published
CVE-2026-106175 A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions,… 2.1 Low Oct 13, 2026
CVE-2024-48887 A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to… 9.3 Critical Apr 8, 2025
CVE-2022-23439 A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison… 4.1 Medium Jan 22, 2025
CVE-2023-37937 An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch… 7.6 High Jan 14, 2025
CVE-2023-37936 A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through… 9.6 Critical Jan 14, 2025
CVE-2022-27488 A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0… 7.5 High Dec 13, 2023
CVE-2022-27490 A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4,… 5.1 Medium Mar 7, 2023
CVE-2021-43074 An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and… 4.1 Medium Feb 16, 2023
CVE-2021-42757 A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may… 6.3 Medium Dec 8, 2021

Other Fortinet products