Fortinet
Fortinet known exploited vulnerabilities
Every Fortinet vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first. 14 of them are known to be used by ransomware.
31 CVEs
- CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability · added October 1, 2026
- CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability · added September 9, 2026
- CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability · added July 27, 2026
- CVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability · added July 16, 2026
- CVE-2026-25089Fortinet FortiSandbox OS Command Injection Vulnerability · added July 16, 2026
- CVE-2026-21643Fortinet FortiClient EMS SQL Injection Vulnerability · added April 13, 2026
- CVE-2026-35616Fortinet FortiClient EMS Improper Access Control Vulnerability · added April 6, 2026
- CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability · added January 27, 2026
- CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability · added December 16, 2025
- CVE-2025-58034Fortinet FortiWeb OS Command Injection Vulnerability · added November 18, 2025
- CVE-2025-64446Fortinet FortiWeb Path Traversal Vulnerability · added November 14, 2025
- CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability · added July 18, 2025
- CVE-2019-6693 ransomwareFortinet FortiOS Use of Hard-Coded Credentials Vulnerability · added June 25, 2025
- CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability · added May 14, 2025
- CVE-2025-24472 ransomwareFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability · added March 18, 2025
- CVE-2024-55591 ransomwareFortinet FortiOS and FortiProxy Authentication Bypass Vulnerability · added January 14, 2025
- CVE-2024-47575Fortinet FortiManager Missing Authentication Vulnerability · added October 23, 2024
- CVE-2024-23113Fortinet Multiple Products Format String Vulnerability · added October 9, 2024
- CVE-2023-48788 ransomwareFortinet FortiClient EMS SQL Injection Vulnerability · added March 25, 2024
- CVE-2024-21762 ransomwareFortinet FortiOS Out-of-Bound Write Vulnerability · added February 9, 2024
- CVE-2023-27997 ransomwareFortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability · added June 13, 2023
- CVE-2022-41328Fortinet FortiOS Path Traversal Vulnerability · added March 14, 2023
- CVE-2022-42475 ransomwareFortinet FortiOS Heap-Based Buffer Overflow Vulnerability · added December 13, 2022
- CVE-2022-40684 ransomwareFortinet Multiple Products Authentication Bypass Vulnerability · added October 11, 2022
- CVE-2018-13374 ransomwareFortinet FortiOS and FortiADC Improper Access Control Vulnerability · added September 8, 2022
- CVE-2018-13383 ransomwareFortinet FortiOS and FortiProxy Out-of-bounds Write · added January 10, 2022
- CVE-2018-13382 ransomwareFortinet FortiOS and FortiProxy Improper Authorization · added January 10, 2022
- CVE-2021-44168Fortinet FortiOS Arbitrary File Download · added December 10, 2021
- CVE-2020-12812 ransomwareFortinet FortiOS SSL VPN Improper Authentication Vulnerability · added November 3, 2021
- CVE-2019-5591 ransomwareFortinet FortiOS Default Configuration Vulnerability · added November 3, 2021
- CVE-2018-13379 ransomwareFortinet FortiOS SSL VPN Path Traversal Vulnerability · added November 3, 2021
Source: CISA Known Exploited Vulnerabilities Catalog (public domain).