Log in Start free

Fortinet

Products

ProductCVEsExploitedLatest
FortiOS17212Oct 27, 2026
FortiProxy1099Oct 13, 2026
FortiWeb734Aug 12, 2026
FortiSwitchManager194Jul 14, 2026
FortiClientEMS213Jul 14, 2026
FortiManager852Oct 13, 2026
FortiSandbox512Oct 26, 2026
FortiPAM372Sep 8, 2026
Fortinet FortiOS272Nov 2, 2022
FortiMail232Oct 13, 2026
FortiSandbox PaaS102Oct 26, 2026
Fortinet FortiOS, FortiProxy62Oct 10, 2022
FortiAnalyzer731Oct 13, 2026
FortiVoice201Apr 14, 2026
FortiRecorder141Mar 10, 2026
FortiNDR131May 12, 2026
FortiSandbox Cloud91Oct 13, 2026
FortiNAC-F31Apr 14, 2026
FortiCamera21Aug 12, 2025
FortiOS-6K7K21Mar 24, 2025
FortiGate11Nov 21, 2019
Fortinet FortiOS and FortiProxy11May 29, 2019
Fortinet FortiOS, FortiProxy, FortiSwitchManager11Oct 18, 2022
Fortinet FortiOS, fortiADC11Jan 22, 2019
FortiADC33–Nov 19, 2025
FortiClientWindows28–Sep 8, 2026
Fortinet FortiWeb25–Apr 6, 2022
FortiSIEM25–Oct 13, 2026
FortiPortal25–Jun 9, 2026
FortiNAC23–Mar 14, 2025
FortiManager Cloud17–Oct 13, 2026
Fortinet FortiMail15–Nov 2, 2022
FortiWLM14–Dec 18, 2024
FortiSOAR14–Aug 12, 2025
FortiClientMac14–Oct 14, 2025
FortiAnalyzer Cloud14–Oct 13, 2026
FortiSOAR on-premise13–Sep 8, 2026
Fortinet FortiSandbox12–Apr 6, 2022
Fortinet FortiPortal12–Mar 1, 2022
FortiSOAR PaaS11–Sep 8, 2026
FortiAuthenticator11–Jul 14, 2026
FortiDDoS-F9–Apr 14, 2026
FortiSwitch9–Oct 13, 2026
Fortinet FortiWLM8–Mar 2, 2022
Fortinet FortiTester8–Nov 2, 2022
Fortinet FortiClientWindows7–Jul 18, 2022
FortiClientLinux7–Mar 10, 2026
FortiDeceptor7–May 12, 2026
FortiIsolator7–Oct 14, 2025
FortiTester7–Oct 14, 2025
Fortinet FortiAnalyzer, FortiManager6–Nov 2, 2022
Fortinet FortiADC6–Nov 2, 2022
Fortinet FortiSOAR6–Nov 2, 2022
FortiDDoS6–Mar 28, 2025
Fortinet FortiManager6–Mar 2, 2022
FortiSASE6–Dec 9, 2025
Fortinet FortiNAC6–Jul 18, 2022
FortiExtender6–Dec 9, 2025
Fortinet FortiWAN6–Apr 6, 2022
FortiWLC5–Mar 17, 2025
FortiWAN5–Dec 19, 2024
Fortinet FortiClientEMS5–Dec 9, 2021
Fortinet FortiEDR5–Nov 2, 2022
FortiAnalyzer-BigData4–Apr 14, 2026
FortiSRA4–Dec 9, 2025
FortiDLP4–Oct 16, 2025
FortiAIOps4–Jul 9, 2024
FortiAP4–May 12, 2026
FortiAP-W24–May 12, 2026
FortiWebManager4–Jun 5, 2024
Fortinet FortiAuthenticator3–Apr 6, 2022
Fortinet FortiManager, FortiAnalyzer3–Jul 18, 2022
FortiAP-U3–May 12, 2026
Fortinet FortiAnalyzer3–Nov 2, 2021
Fortinet FortiDeceptor3–Nov 2, 2022
Fortinet FortiClientMac3–Nov 2, 2022
Fortinet FortiClientLinux3–May 11, 2022
Fortinet FortiProxy3–May 11, 2022
Fortinet FortiIsolator3–May 4, 2022
Fortinet FortiSIEMWindowsAgent2–Nov 2, 2021
FortiPresence2–Sep 13, 2023
FortiClientiOS2–Sep 10, 2024
Fortinet FortiWLC2–Dec 8, 2021
FortiDDoS-CM2–Mar 28, 2025
FortiAP-S2–Jan 14, 2025
FortiFone2–Jan 13, 2026
FortiSwitchAXFixed2–Mar 10, 2026
Fortinet FortiAP-C1–Mar 2, 2022
FortiPAM Chrome Extension1–Sep 22, 2026
Fortinet FortiManager, FortiAnalyzer, FortiPortal1–Apr 6, 2022
Fortinet FortiSDNConnector1–Oct 6, 2021
FortiSOAR Agent Communication Bridge1–Mar 10, 2026
FortiAP-C1–Sep 13, 2023
FortiMonitorOnSight1–Sep 11, 2026
FortiClientAndroid1–Sep 10, 2024
Fortinet FortiClient for Windows1–Jun 1, 2020
Fortinet FortiAI1–Jun 3, 2021
Fortinet FortiClientWindows, FortiClientEMS1–Dec 1, 2021
Fortinet FortiAP-W2, FortiAP-S, FortiAP1–Jul 9, 2021
Fortinet FortiSwitch1–Jun 1, 2021
Fortinet Meru AP1–Dec 9, 2021
FortiTokenAndroid1–May 12, 2026
FortiGuest1–Oct 10, 2023
Fortinet FortiTokenAndroid1–Mar 2, 2022
Fortinet FortiAP, FortiAP-S, FortiAP-W2, FortiAP-U1–Sep 6, 2022
Fortinet FSSO Windows DC Agent, FSSO Windows CA1–Jul 12, 2021
FortiEDR CollectorWindows1–Nov 14, 2023
Fortinet FortiWebManager1–Oct 6, 2021
Fortinet FortiSIEM1–Nov 2, 2022
FortiVoiceUCDesktop1–May 13, 2025
FortiEDR Manager1–Sep 10, 2024
Fortinet FortiProxy, FortiOS1–Jul 18, 2022
FortiADCManager1–Jun 13, 2023
Fortinet FortiAuthenticator OutlookAgent1–Jul 18, 2022
Fortinet FortiManager , FortiAnalyzer1–Jul 18, 2022
Fortinet FortiADC, FortiProxy, FortiMail, FortiOS1–Aug 5, 2022
Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac1–Dec 16, 2021
Fortinet FortiSandbox, FortiAuthenticator1–Aug 4, 2021
IPS Engine1–Oct 10, 2023
Fortinet AV Engine, FortiMail, FortiOS, FortiClient1–Nov 2, 2022
Fortinet FortiPresence1–Jun 2, 2021
FortiEDR1–Oct 13, 2023
Fortinet FortiADCManager, FortiADC1–Apr 12, 2021
FortiSIEMWindowsAgent1–Jul 14, 2026
Fortinet FortiAP-U1–Jul 18, 2022
Fortinet FortiDDoS1–Jul 18, 2022
FortiConverter1–Jun 13, 2023
FortiVoiceEnterprise1–Apr 27, 2020
FortiGate and FortiProxy1–Oct 21, 2020
Fortinet FortiTokenAndroid, Fortinet FortiTokeniOS, Fortinet FortiTokenWinApp1–Jul 18, 2022
Fortinet FortiSwitch, FortiRecorder, FortiVoiceEnterprise, FortiOS, FortiProxy1–Jul 18, 2022

Exploited and recent CVEs

  • CVE-2026-104286 Critical 9.8 Exploited An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, 4.6%
  • CVE-2026-25089 Critical 9.1 Exploited A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 76.1%
  • CVE-2026-25089 Critical 9.1 Exploited A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 76.1%
  • CVE-2026-25089 Critical 9.1 Exploited A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 76.1%
  • CVE-2025-61624 Medium 5.4 Exploited An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, 1.3%
  • CVE-2025-61624 Medium 5.4 Exploited An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, 1.3%
  • CVE-2025-61624 Medium 5.4 Exploited An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, 1.3%
  • CVE-2025-61624 Medium 5.4 Exploited An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, 1.3%
  • CVE-2026-39808 Critical 9.1 Exploited A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code 93.2%
  • CVE-2026-39808 Critical 9.1 Exploited A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.8 may allow attacker to execute unauthorized code 93.2%
  • CVE-2026-35616 Critical 9.1 Exploited A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. 94.0%
  • CVE-2025-68686 Medium 5.3 Exploited An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, Fort 29.5%
  • CVE-2026-21643 Critical 9.1 Exploited An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized cod 97.7%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2026-24858 Critical 9.4 Exploited An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 86.6%
  • CVE-2025-25249 High 7.4 Exploited A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, F 3.7%
  • CVE-2025-25249 High 7.4 Exploited A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, F 3.7%
  • CVE-2025-59718 Critical 9.1 Exploited A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, Forti 68.3%
  • CVE-2025-59718 Critical 9.1 Exploited A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, Forti 68.3%
  • CVE-2025-59718 Critical 9.1 Exploited A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, Forti 68.3%
  • CVE-2025-58034 Medium 6.7 Exploited An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6. 54.7%
  • CVE-2025-64446 Critical 9.4 Exploited A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0. 91.1%
  • CVE-2025-25257 Critical 9.6 Exploited An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7, For 99.9%
  • CVE-2025-32756 Critical 9.6 Exploited A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6 30.9%
  • CVE-2025-32756 Critical 9.6 Exploited A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6 30.9%
  • CVE-2025-32756 Critical 9.6 Exploited A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6 30.9%