Skip to content
THREATWIRE

CVE Tracker · Vendor

Fortinet CVEs

33 CVEs in the tracker, 32 in the CISA KEV catalogue.

All vendors · RSS feed for Fortinet · Tracker data last updated 18 Oct 2026.

Showing 33 of 33

  1. CVE-2026-104286CVSS 9.8 criticalEPSS 2.20%KEV2026-10-01

    FortiMail. Fortinet FortiMail Path Traversal Vulnerability

  2. CVE-2025-61624CVSS 6.5 mediumEPSS 1.08%KEV2026-04-14

    Multiple Products. Fortinet Multiple Products Path Traversal Vulnerability

  3. CVE-2025-68686CVSS 5.9 mediumEPSS 29.5%KEV2026-02-10

    FortiOS. Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

  4. CVE-2025-25249CVSS 9.8 criticalEPSS 3.80%KEV2026-01-13

    Multiple Products. Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

  5. CVE-2025-25257CVSS 9.8 criticalEPSS 100%KEV2025-07-17

    FortiWeb. Fortinet FortiWeb SQL Injection Vulnerability

  6. CVE-2023-48788CVSS 9.8 criticalEPSS 98.4%KEV2024-03-12

    FortiClient EMS. Fortinet FortiClient EMS SQL Injection Vulnerability

  7. CVE-2022-39952CVSS 9.8 criticalEPSS 100%2023-02-16

    fortinac. A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 throu…

  8. CVE-2022-42475CVSS 9.8 criticalEPSS 99.5%KEV2023-01-02

    FortiOS. Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

  9. CVE-2022-40684CVSS 9.8 criticalEPSS 100%KEV2022-10-18

    Multiple Products. Fortinet Multiple Products Authentication Bypass Vulnerability

  10. CVE-2018-13379CVSS 9.8 criticalEPSS 100%KEV2019-06-04

    FortiOS. Fortinet FortiOS SSL VPN Path Traversal Vulnerability

  11. CVE-2026-39808No CVSSEPSS 47.4%KEV

    FortiSandbox. Fortinet FortiSandbox OS Command Injection Vulnerability

  12. CVE-2026-35616No CVSSEPSS 9.10%KEV

    FortiClient EMS. Fortinet FortiClient EMS Improper Access Control Vulnerability

  13. CVE-2026-25089No CVSSEPSS 76.1%KEV

    FortiSandbox. Fortinet FortiSandbox OS Command Injection Vulnerability

  14. CVE-2026-24858No CVSSEPSS 85.8%KEV

    Multiple Products. Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

  15. CVE-2026-21643No CVSSEPSS 93.9%KEV

    FortiClient EMS. Fortinet FortiClient EMS SQL Injection Vulnerability

  16. CVE-2025-64446No CVSSEPSS 92.0%KEV

    FortiWeb. Fortinet FortiWeb Path Traversal Vulnerability

  17. CVE-2025-59718No CVSSEPSS 68.3%KEV

    Multiple Products. Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

  18. CVE-2025-58034No CVSSEPSS 55.6%KEV

    FortiWeb. Fortinet FortiWeb OS Command Injection Vulnerability

  19. CVE-2025-32756No CVSSEPSS 30.7%KEV

    Multiple Products. Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

  20. CVE-2025-24472No CVSSEPSS 7.23%KEV

    FortiOS and FortiProxy. Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

  21. CVE-2024-55591No CVSSEPSS 94.1%KEV

    FortiOS and FortiProxy. Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

  22. CVE-2024-47575No CVSSEPSS 94.8%KEV

    FortiManager. Fortinet FortiManager Missing Authentication Vulnerability

  23. CVE-2024-23113No CVSSEPSS 61.7%KEV

    Multiple Products. Fortinet Multiple Products Format String Vulnerability

  24. CVE-2024-21762No CVSSEPSS 83.4%KEV

    FortiOS. Fortinet FortiOS Out-of-Bound Write Vulnerability

  25. CVE-2023-27997No CVSSEPSS 85.7%KEV

    FortiOS and FortiProxy SSL-VPN. Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

  26. CVE-2022-41328No CVSSEPSS 10.7%KEV

    FortiOS. Fortinet FortiOS Path Traversal Vulnerability

  27. CVE-2021-44168No CVSSEPSS 0.86%KEV

    FortiOS. Fortinet FortiOS Arbitrary File Download

  28. CVE-2020-12812No CVSSEPSS 45.4%KEV

    FortiOS. Fortinet FortiOS SSL VPN Improper Authentication Vulnerability

  29. CVE-2019-6693No CVSSEPSS 6.64%KEV

    FortiOS. Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

  30. CVE-2019-5591No CVSSEPSS 18.6%KEV

    FortiOS. Fortinet FortiOS Default Configuration Vulnerability

  31. CVE-2018-13383No CVSSEPSS 33.6%KEV

    FortiOS and FortiProxy. Fortinet FortiOS and FortiProxy Out-of-bounds Write

  32. CVE-2018-13382No CVSSEPSS 81.7%KEV

    FortiOS and FortiProxy. Fortinet FortiOS and FortiProxy Improper Authorization

  33. CVE-2018-13374No CVSSEPSS 38.1%KEV

    FortiOS and FortiADC. Fortinet FortiOS and FortiADC Improper Access Control Vulnerability