| CVE-2026-59840 |
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
|
4.1
Medium
|
Jul 14, 2026 |
| CVE-2025-61624 |
Exploited
Fortinet Multiple Products Path Traversal Vulnerability
|
5.4
Medium
|
Apr 14, 2026 |
| CVE-2025-25249 |
Exploited
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
|
7.4
High
|
Jan 13, 2026 |
| CVE-2025-59718 |
Exploited
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
|
9.1
Critical
|
Dec 9, 2025 |
| CVE-2024-26008 |
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3…
|
5.0
Medium
|
Oct 14, 2025 |
| CVE-2025-22258 |
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0…
|
5.7
Medium
|
Oct 14, 2025 |
| CVE-2025-49201 |
A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions,…
|
7.4
High
|
Oct 14, 2025 |
| CVE-2024-26009 |
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through…
|
7.9
High
|
Aug 12, 2025 |
| CVE-2025-22252 |
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager…
|
9.0
Critical
|
May 28, 2025 |
| CVE-2023-25610 |
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0…
|
9.3
Critical
|
Mar 24, 2025 |
| CVE-2023-40721 |
A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged…
|
6.3
Medium
|
Feb 11, 2025 |
| CVE-2024-26011 |
A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2,…
|
5.2
Medium
|
Nov 12, 2024 |
| CVE-2022-45862 |
An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions,…
|
3.5
Low
|
Aug 13, 2024 |
| CVE-2024-26010 |
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7,…
|
6.7
Medium
|
Jun 11, 2024 |
| CVE-2023-36640 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,…
|
6.2
Medium
|
May 14, 2024 |
| CVE-2023-45583 |
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5,…
|
6.2
Medium
|
May 14, 2024 |
| CVE-2024-23113 |
Exploited
Fortinet Multiple Products Format String Vulnerability
|
9.8
Critical
|
Feb 15, 2024 |
| CVE-2023-36635 |
An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a…
|
6.9
Medium
|
Sep 7, 2023 |
| CVE-2022-42474 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0…
|
6.2
Medium
|
Jun 13, 2023 |
| CVE-2022-41335 |
A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…
|
8.6
High
|
Feb 16, 2023 |