Fortinet: known exploited vulnerabilities
32Catalog entries
14Ransomware use
2026-10-16Last added
2026-10-19Latest due date
Get an email when Fortinet is next added.Watch Fortinet
| CVE | Product / vulnerability | Due |
|---|---|---|
| CVE-2025-61624 | Multiple Products NEW Fortinet Multiple Products Path Traversal Vulnerability |
2026-10-19 |
| CVE-2026-104286 | FortiMail Fortinet FortiMail Path Traversal Vulnerability |
2026-10-04 |
| CVE-2025-25249 | Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability |
2026-09-12 |
| CVE-2025-68686 | FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
2026-08-10 |
| CVE-2026-39808 | FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability |
2026-07-19 |
| CVE-2026-25089 | FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability |
2026-07-19 |
| CVE-2026-21643 | FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability |
2026-04-16 |
| CVE-2026-35616 | FortiClient EMS Fortinet FortiClient EMS Improper Access Control Vulnerability |
2026-04-09 |
| CVE-2026-24858 | Multiple Products Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability |
2026-01-30 |
| CVE-2025-59718 | Multiple Products Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability |
2025-12-23 |
| CVE-2025-58034 | FortiWeb Fortinet FortiWeb OS Command Injection Vulnerability |
2025-11-25 |
| CVE-2025-64446 | FortiWeb Fortinet FortiWeb Path Traversal Vulnerability |
2025-11-21 |
| CVE-2025-25257 | FortiWeb Fortinet FortiWeb SQL Injection Vulnerability |
2025-08-08 |
| CVE-2019-6693 | FortiOS RANSOMWARE Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability |
2025-07-16 |
| CVE-2025-32756 | Multiple Products Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability |
2025-06-04 |
| CVE-2025-24472 | FortiOS and FortiProxy RANSOMWARE Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
2025-04-08 |
| CVE-2024-55591 | FortiOS and FortiProxy RANSOMWARE Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
2025-01-21 |
| CVE-2024-47575 | FortiManager Fortinet FortiManager Missing Authentication Vulnerability |
2024-11-13 |
| CVE-2024-23113 | Multiple Products Fortinet Multiple Products Format String Vulnerability |
2024-10-30 |
| CVE-2023-48788 | FortiClient EMS RANSOMWARE Fortinet FortiClient EMS SQL Injection Vulnerability |
2024-04-15 |
| CVE-2024-21762 | FortiOS RANSOMWARE Fortinet FortiOS Out-of-Bound Write Vulnerability |
2024-02-16 |
| CVE-2023-27997 | FortiOS and FortiProxy SSL-VPN RANSOMWARE Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability |
2023-07-04 |
| CVE-2022-41328 | FortiOS Fortinet FortiOS Path Traversal Vulnerability |
2023-04-04 |
| CVE-2022-42475 | FortiOS RANSOMWARE Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability |
2023-01-03 |
| CVE-2022-40684 | Multiple Products RANSOMWARE Fortinet Multiple Products Authentication Bypass Vulnerability |
2022-11-01 |
| CVE-2018-13374 | FortiOS and FortiADC RANSOMWARE Fortinet FortiOS and FortiADC Improper Access Control Vulnerability |
2022-09-29 |
| CVE-2018-13383 | FortiOS and FortiProxy RANSOMWARE Fortinet FortiOS and FortiProxy Out-of-bounds Write |
2022-07-10 |
| CVE-2018-13382 | FortiOS and FortiProxy RANSOMWARE Fortinet FortiOS and FortiProxy Improper Authorization |
2022-07-10 |
| CVE-2021-44168 | FortiOS Fortinet FortiOS Arbitrary File Download |
2021-12-24 |
| CVE-2018-13379 | FortiOS RANSOMWARE Fortinet FortiOS SSL VPN Path Traversal Vulnerability |
2022-05-03 |
| CVE-2020-12812 | FortiOS RANSOMWARE Fortinet FortiOS SSL VPN Improper Authentication Vulnerability |
2022-05-03 |
| CVE-2019-5591 | FortiOS RANSOMWARE Fortinet FortiOS Default Configuration Vulnerability |
2022-05-03 |