Fortinet vulnerabilities
1,162 vulnerabilities
Known vulnerabilities in Fortinet products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 233 products.
Products
50 of 233- Fortios283 vulnerabilities
- Fortimanager134 vulnerabilities
- Fortiproxy134 vulnerabilities
- Fortiweb126 vulnerabilities
- Fortianalyzer111 vulnerabilities
- Forticlient85 vulnerabilities
- Fortisandbox65 vulnerabilities
- Fortiadc49 vulnerabilities
- Fortimail49 vulnerabilities
- Fortiportal46 vulnerabilities
- Fortinet Fortios39 vulnerabilities
- Fortipam38 vulnerabilities
- Fortisiem35 vulnerabilities
- Fortimanager Cloud32 vulnerabilities
- Fortisoar32 vulnerabilities
- Forticlientwindows30 vulnerabilities
- Fortinac30 vulnerabilities
- Fortinet Fortiweb27 vulnerabilities
- Fortivoice25 vulnerabilities
- Fortiauthenticator24 vulnerabilities
- Fortiwlm23 vulnerabilities
- Fortianalyzer Cloud22 vulnerabilities
- Forticlientems22 vulnerabilities
- Fortiswitchmanager20 vulnerabilities
- Fortirecorder18 vulnerabilities
- Fortinet Antivirus17 vulnerabilities
- Fortitester16 vulnerabilities
- Fortiwan16 vulnerabilities
- Forticlientmac15 vulnerabilities
- Fortinet Fortimail15 vulnerabilities
- Fortiswitch15 vulnerabilities
- Fortisase14 vulnerabilities
- Fortiwlc14 vulnerabilities
- Fortianalyzer Big Data13 vulnerabilities
- Fortinac F13 vulnerabilities
- Fortindr13 vulnerabilities
- Fortinet Fortiportal13 vulnerabilities
- Fortisoar On Premise13 vulnerabilities
- Fortinet Fortisandbox12 vulnerabilities
- Fortisandbox Cloud12 vulnerabilities
- Fortideceptor11 vulnerabilities
- Fortisoar Paas11 vulnerabilities
- Fortiisolator10 vulnerabilities
- Fortiap W29 vulnerabilities
- Fortiddos F9 vulnerabilities
- Fortisandbox Paas9 vulnerabilities
- Fortiextender8 vulnerabilities
- Fortinet Forticlientwindows8 vulnerabilities
- Fortinet Fortitester8 vulnerabilities
- Fortinet Fortiwlm8 vulnerabilities
CVE-2026-23707fortinetfortianalyzer+3
EPSS score0.31%
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4 may allow a low privileged user to execute arbitrary commands via crafted requests.CVE-2026-23706fortinetfortianalyzer+2EPSS score0.25%
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.CVE-2026-23705fortinetfortianalyzer+1EPSS score0.31%
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.6, FortiManager 7.2 all versions may allow a low privileged user to execute arbitrary commands via crafted requests.CVE-2026-106176fortinetfortisiemEPSS score0.21%
A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsCVE-2026-106175fortinetfortios+4EPSS score0.10%
A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions, FortiSwitch 7.2 all versions may allow a local authenticated attacker to crash the newcli daemon via crafted CLI commands.CVE-2026-106173fortinetfortisiemEPSS score0.43%
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets.CVE-2026-106172fortinetfortisandbox+1EPSS score0.24%
A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Cloud 4.4 all versions may allow attacker to escalation of privilege via specially crafted HTTP requestsCVE-2026-106171fortinetfortimanager+1EPSS score0.71%
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of privilege via specially crafted packetsCVE-2026-106170fortinetfortisandboxEPSS score0.28%
An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.CVE-2025-57739fortinetfortimailEPSS score0.30%
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP or HTTPS requests.CVE-2025-46773fortinetfortianalyzer+1EPSS score0.32%
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2.1 through 7.2.11 may allow a low privileged user to execute arbitrary commands via crafted requests.CVE-2018-13379fortinetfortinet fortios, fortiproxy+2KEVRansomwareEPSS score100.00%
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.CVE-2018-13374fortinetfortiadc+2KEVRansomwareEPSS score38.09%
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server login credentials configured in FortiGate via pointing a LDAP server connectivity test request to a rogue LDAP server instead of the configured one.CVE-2018-13367fortinetfortiosEPSS score0.91%
An information exposure vulnerability in FortiOS 6.2.3, 6.2.0 and below may allow an unauthenticated attacker to gain platform information such as version, models, via parsing a JavaScript file through admin webUI.CVE-2018-13383fortinetfortinet fortios and fortiproxy+2KEVRansomwareEPSS score33.65%
A heap buffer overflow in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.10, 5.4.0 through 5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier in the SSL VPN web portal may cause the SSL VPN web service termination for logged in users due to a failure to properly handle javascript href data when proxying webpages.CVE-2018-13375fortinetfortianalyzer+1EPSS score0.65%
An Improper Neutralization of Script-Related HTML Tags in Fortinet FortiAnalyzer 5.6.0 and below and FortiManager 5.6.0 and below allows an attacker to send DHCP request containing malicious scripts in the HOSTNAME parameter. The malicious script code is executed while viewing the logs in FortiAnalyzer and FortiManager (with FortiAnalyzer feature enabled).CVE-2018-13371fortinetfortiosEPSS score1.31%
An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component.CVE-2018-13384fortinetfortinet fortios+1EPSS score1.36%
A Host Header Redirection vulnerability in Fortinet FortiOS all versions below 6.0.5 under SSL VPN web portal allows a remote attacker to potentially poison HTTP cache and subsequently redirect SSL VPN web portal users to arbitrary web domains.CVE-2018-13380fortinetfortinet fortios and fortiproxy+2EPSS score62.47%
A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below and Fortinet FortiProxy 2.0.0, 1.2.8 and below under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or message handling parameters.CVE-2018-13365fortinetfortinet fortios+1EPSS score0.91%
An Information Exposure vulnerability in Fortinet FortiOS 6.0.1, 5.6.5 and below, allow attackers to learn private IP as well as the hostname of FortiGate via Application Control Block page.