Exploited vulnerabilities tracker
CISA's catalog of vulnerabilities confirmed as exploited in the wild: 1769 entries, 35 added in the last 30 days, latest on Nov 6, 2026.
32 matching
| Added | CVE | Vendor / product | Vulnerability | Severity | Exploit odds | Due |
|---|---|---|---|---|---|---|
| Oct 16, 2026 | CVE-2025-61624 | Fortinet · Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | Medium 5.4 | 1.3% | Oct 19, 2026 |
| Oct 1, 2026 | CVE-2026-104286 | Fortinet · FortiMail | Fortinet FortiMail Path Traversal Vulnerability | Critical 9.8 | 4.6% | Oct 4, 2026 |
| Sep 9, 2026 | CVE-2025-25249 | Fortinet · Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | High 7.4 | 3.7% | Sep 12, 2026 |
| Jul 27, 2026 | CVE-2025-68686 | Fortinet · FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Medium 5.3 | 29.5% | Aug 10, 2026 |
| Jul 16, 2026 | CVE-2026-39808 | Fortinet · FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Critical 9.1 | 93.2% | Jul 19, 2026 |
| Jul 16, 2026 | CVE-2026-25089 | Fortinet · FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Critical 9.1 | 76.1% | Jul 19, 2026 |
| Apr 13, 2026 | CVE-2026-21643 | Fortinet · FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Critical 9.1 | 97.7% | Apr 16, 2026 |
| Apr 6, 2026 | CVE-2026-35616 | Fortinet · FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | Critical 9.1 | 94.0% | Apr 9, 2026 |
| Jan 27, 2026 | CVE-2026-24858 | Fortinet · Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | Critical 9.4 | 86.6% | Jan 30, 2026 |
| Dec 16, 2025 | CVE-2025-59718 | Fortinet · Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | Critical 9.1 | 68.3% | Dec 23, 2025 |
| Nov 18, 2025 | CVE-2025-58034 | Fortinet · FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | Medium 6.7 | 54.7% | Nov 25, 2025 |
| Nov 14, 2025 | CVE-2025-64446 | Fortinet · FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | Critical 9.4 | 91.1% | Nov 21, 2025 |
| Jul 18, 2025 | CVE-2025-25257 | Fortinet · FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | Critical 9.6 | 99.9% | Aug 8, 2025 |
| Jun 25, 2025 | CVE-2019-6693 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | Medium 6.5 | 6.6% | Jul 16, 2025 |
| May 14, 2025 | CVE-2025-32756 | Fortinet · Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | Critical 9.6 | 30.9% | Jun 4, 2025 |
| Mar 18, 2025 | CVE-2025-24472 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | High 8.1 | 7.2% | Apr 8, 2025 |
| Jan 14, 2025 | CVE-2024-55591 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Critical 9.6 | 94.3% | Jan 21, 2025 |
| Oct 23, 2024 | CVE-2024-47575 | Fortinet · FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | Critical 9.8 | 94.8% | Nov 13, 2024 |
| Oct 9, 2024 | CVE-2024-23113 | Fortinet · Multiple Products | Fortinet Multiple Products Format String Vulnerability | Critical 9.8 | 61.7% | Oct 30, 2024 |
| Mar 25, 2024 | CVE-2023-48788 Ransomware | Fortinet · FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Critical 9.3 | 98.4% | Apr 15, 2024 |
| Feb 9, 2024 | CVE-2024-21762 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | Critical 9.6 | 84.6% | Feb 16, 2024 |
| Jun 13, 2023 | CVE-2023-27997 Ransomware | Fortinet · FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | Critical 9.2 | 85.7% | Jul 4, 2023 |
| Mar 14, 2023 | CVE-2022-41328 | Fortinet · FortiOS | Fortinet FortiOS Path Traversal Vulnerability | Medium 6.5 | 10.7% | Apr 4, 2023 |
| Dec 13, 2022 | CVE-2022-42475 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | Critical 9.3 | 99.5% | Jan 3, 2023 |
| Oct 11, 2022 | CVE-2022-40684 Ransomware | Fortinet · Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | Critical 9.8 | 100.0% | Nov 1, 2022 |
| Sep 8, 2022 | CVE-2018-13374 Ransomware | Fortinet · FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | Medium 4.3 | 38.1% | Sep 29, 2022 |
| Jan 10, 2022 | CVE-2018-13383 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | Medium 4.3 | 32.5% | Jul 10, 2022 |
| Jan 10, 2022 | CVE-2018-13382 Ransomware | Fortinet · FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | Critical 9.1 | 81.7% | Jul 10, 2022 |
| Dec 10, 2021 | CVE-2021-44168 | Fortinet · FortiOS | Fortinet FortiOS Arbitrary File Download | Low 3.3 | 0.9% | Dec 24, 2021 |
| Nov 3, 2021 | CVE-2020-12812 Ransomware | Fortinet · FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | High 7.5 | 45.4% | May 3, 2022 |
| Nov 3, 2021 | CVE-2019-5591 Ransomware | Fortinet · FortiOS | Fortinet FortiOS Default Configuration Vulnerability | Medium 6.5 | 18.6% | May 3, 2022 |
| Nov 3, 2021 | CVE-2018-13379 Ransomware | Fortinet · FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | Critical 9.1 | 100.0% | May 3, 2022 |