https://vulnogram.org/ Most recent CVEs assigned by Fortinet, Inc. (fortinet). https://vulnogram.org/seaview/icons/fortinet.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:07 GMT https://vulnogram.org/CVE-2026-106175 https://vulnogram.org/CVE-2026-106175 A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6… Low Tue, 13 Oct 2026 17:37:19 GMT https://vulnogram.org/CVE-2026-106172 https://vulnogram.org/CVE-2026-106172 A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSa… Medium Network Exploitable Tue, 13 Oct 2026 17:37:16 GMT https://vulnogram.org/CVE-2026-23707 https://vulnogram.org/CVE-2026-23707 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyz… Medium Tue, 13 Oct 2026 17:37:14 GMT https://vulnogram.org/CVE-2026-23706 https://vulnogram.org/CVE-2026-23706 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyz… Medium Tue, 13 Oct 2026 17:37:14 GMT https://vulnogram.org/CVE-2026-23705 https://vulnogram.org/CVE-2026-23705 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiManage… Medium Tue, 13 Oct 2026 17:37:14 GMT https://vulnogram.org/CVE-2025-46773 https://vulnogram.org/CVE-2025-46773 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyz… High Tue, 13 Oct 2026 17:37:14 GMT https://vulnogram.org/CVE-2025-57739 https://vulnogram.org/CVE-2025-57739 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authenticat… High Tue, 13 Oct 2026 17:37:11 GMT https://vulnogram.org/CVE-2026-106170 https://vulnogram.org/CVE-2026-106170 An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged attacker to deny access to the GUI and CLI persistently v… Medium Tue, 13 Oct 2026 17:37:10 GMT https://vulnogram.org/CVE-2026-106173 https://vulnogram.org/CVE-2026-106173 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially crafted packets. Critical Network Exploitable Tue, 13 Oct 2026 17:37:09 GMT https://vulnogram.org/CVE-2026-106176 https://vulnogram.org/CVE-2026-106176 A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests Low Tue, 13 Oct 2026 17:37:08 GMT https://vulnogram.org/CVE-2026-106171 https://vulnogram.org/CVE-2026-106171 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2 through 7.6.6 may allow attacker to escalation of pr… Medium Tue, 13 Oct 2026 17:37:02 GMT https://vulnogram.org/CVE-2026-104286 https://vulnogram.org/CVE-2026-104286 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauth… Critical Known Exploited Network Exploitable Thu, 01 Oct 2026 19:17:38 GMT https://vulnogram.org/CVE-2026-84388 https://vulnogram.org/CVE-2026-84388 A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack Critical Network Exploitable Tue, 22 Sep 2026 14:12:50 GMT https://vulnogram.org/CVE-2026-84390 https://vulnogram.org/CVE-2026-84390 A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker to improper access control via <insert attack vector here> Critical Network Exploitable Fri, 11 Sep 2026 12:13:15 GMT https://vulnogram.org/CVE-2026-84392 https://vulnogram.org/CVE-2026-84392 A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all version… Low Tue, 08 Sep 2026 16:42:06 GMT https://vulnogram.org/CVE-2026-22575 https://vulnogram.org/CVE-2026-22575 An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.4.1 through 7.4.10, FortiManager Clo… Medium Tue, 08 Sep 2026 16:41:50 GMT https://vulnogram.org/CVE-2026-84391 https://vulnogram.org/CVE-2026-84391 A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here> Medium Tue, 08 Sep 2026 16:41:50 GMT https://vulnogram.org/CVE-2026-84393 https://vulnogram.org/CVE-2026-84393 A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <insert attack vector here> High Network Exploitable Tue, 08 Sep 2026 16:41:49 GMT https://vulnogram.org/CVE-2026-26084 https://vulnogram.org/CVE-2026-26084 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow attacker to access sensitive information v… High Network Exploitable Tue, 08 Sep 2026 16:41:47 GMT https://vulnogram.org/CVE-2026-84385 https://vulnogram.org/CVE-2026-84385 A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all versions, FortiSOAR on-premise 7.6.0 through 7.6.6, FortiSOAR on-premi… Medium Tue, 08 Sep 2026 16:41:46 GMT https://vulnogram.org/CVE-2026-84389 https://vulnogram.org/CVE-2026-84389 A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute unauthorized code or commands via <insert attack vector here> Low Network Exploitable Tue, 08 Sep 2026 16:41:45 GMT https://vulnogram.org/CVE-2026-84387 https://vulnogram.org/CVE-2026-84387 A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9 may allow attacker to execute unauthorized code or… Medium Tue, 08 Sep 2026 16:41:43 GMT https://vulnogram.org/CVE-2026-84386 https://vulnogram.org/CVE-2026-84386 A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port. Medium Tue, 08 Sep 2026 16:41:43 GMT https://vulnogram.org/CVE-2026-70468 https://vulnogram.org/CVE-2026-70468 A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManage… High Network Exploitable Wed, 12 Aug 2026 12:19:04 GMT https://vulnogram.org/CVE-2026-26035 https://vulnogram.org/CVE-2026-26035 An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote un… High Network Exploitable Wed, 12 Aug 2026 12:19:03 GMT https://vulnogram.org/CVE-2026-70466 https://vulnogram.org/CVE-2026-70466 A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control… Medium Network Exploitable Wed, 12 Aug 2026 12:19:02 GMT https://vulnogram.org/CVE-2026-71407 https://vulnogram.org/CVE-2026-71407 A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD… Medium Network Exploitable Wed, 12 Aug 2026 12:19:02 GMT https://vulnogram.org/CVE-2026-70467 https://vulnogram.org/CVE-2026-70467 A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versio… Low Wed, 12 Aug 2026 12:19:02 GMT https://vulnogram.org/CVE-2026-71408 https://vulnogram.org/CVE-2026-71408 A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here> Medium Network Exploitable Wed, 12 Aug 2026 12:19:00 GMT https://vulnogram.org/CVE-2026-70465 https://vulnogram.org/CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft D… High Network Exploitable Wed, 12 Aug 2026 11:52:25 GMT https://vulnogram.org/CVE-2026-59838 https://vulnogram.org/CVE-2026-59838 A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM… Medium Wed, 15 Jul 2026 13:43:36 GMT https://vulnogram.org/CVE-2026-59840 https://vulnogram.org/CVE-2026-59840 A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, Fort… Medium Tue, 14 Jul 2026 15:19:51 GMT https://vulnogram.org/CVE-2025-43892 https://vulnogram.org/CVE-2025-43892 A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of devi… Medium Tue, 14 Jul 2026 15:19:51 GMT https://vulnogram.org/CVE-2026-23573 https://vulnogram.org/CVE-2026-23573 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all… Medium Network Exploitable Tue, 14 Jul 2026 15:19:47 GMT https://vulnogram.org/CVE-2026-59839 https://vulnogram.org/CVE-2026-59839 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPA… Medium Tue, 14 Jul 2026 15:19:46 GMT https://vulnogram.org/CVE-2025-62826 https://vulnogram.org/CVE-2025-62826 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4… Low Network Exploitable Tue, 14 Jul 2026 15:19:46 GMT https://vulnogram.org/CVE-2025-62675 https://vulnogram.org/CVE-2025-62675 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4… Low Network Exploitable Tue, 14 Jul 2026 15:15:12 GMT https://vulnogram.org/CVE-2026-59836 https://vulnogram.org/CVE-2026-59836 A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here> Medium Network Exploitable Tue, 14 Jul 2026 15:15:08 GMT https://vulnogram.org/CVE-2026-59841 https://vulnogram.org/CVE-2026-59841 A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here> Medium Tue, 14 Jul 2026 15:15:08 GMT https://vulnogram.org/CVE-2025-53379 https://vulnogram.org/CVE-2025-53379 A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request. High Network Exploitable Tue, 14 Jul 2026 15:13:02 GMT https://vulnogram.org/CVE-2026-59835 https://vulnogram.org/CVE-2026-59835 A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests. High Network Exploitable Tue, 14 Jul 2026 15:12:20 GMT https://vulnogram.org/CVE-2026-59837 https://vulnogram.org/CVE-2026-59837 A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, F… Medium Tue, 14 Jul 2026 15:06:31 GMT https://vulnogram.org/CVE-2025-67862 https://vulnogram.org/CVE-2025-67862 An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all v… Medium Tue, 09 Jun 2026 14:27:50 GMT https://vulnogram.org/CVE-2026-25089 https://vulnogram.org/CVE-2026-25089 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through… Critical Known Exploited Network Exploitable Tue, 09 Jun 2026 14:27:47 GMT https://vulnogram.org/CVE-2026-49938 https://vulnogram.org/CVE-2026-49938 A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here> Medium Tue, 09 Jun 2026 14:27:42 GMT https://vulnogram.org/CVE-2025-53870 https://vulnogram.org/CVE-2025-53870 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all vers… Medium Tue, 12 May 2026 16:54:32 GMT https://vulnogram.org/CVE-2025-53680 https://vulnogram.org/CVE-2025-53680 An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all version… Medium Tue, 12 May 2026 16:54:15 GMT https://vulnogram.org/CVE-2025-67604 https://vulnogram.org/CVE-2025-67604 A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0… Medium Tue, 12 May 2026 16:54:11 GMT https://vulnogram.org/CVE-2025-53681 https://vulnogram.org/CVE-2025-53681 An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5, FortiMail 7.2.0 through 7.2.8 allows an authentica… Medium Tue, 12 May 2026 16:54:11 GMT https://vulnogram.org/CVE-2026-25690 https://vulnogram.org/CVE-2026-25690 An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through 5.3.3, FortiDeceptor 5.2.0 through 5.2.1, FortiDeceptor 5.1 all versions, F… Medium Tue, 12 May 2026 16:54:10 GMT