Fortinet
32 vulnerabilities in Fortinet products that CISA lists as exploited.
| CVE | Vendor | Product | Name | Added | Fix due | Ransomware |
|---|---|---|---|---|---|---|
| CVE-2025-61624 | Fortinet | Multiple Products | Fortinet Multiple Products Path Traversal Vulnerability | 16 Oct 2026 | 19 Oct 2026 | Unknown |
| CVE-2026-104286 | Fortinet | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 1 Oct 2026 | 4 Oct 2026 | Unknown |
| CVE-2025-25249 | Fortinet | Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 9 Sep 2026 | 12 Sep 2026 | Unknown |
| CVE-2025-68686 | Fortinet | FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 27 Jul 2026 | 10 Aug 2026 | Unknown |
| CVE-2026-25089 | Fortinet | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 | 19 Jul 2026 | Unknown |
| CVE-2026-39808 | Fortinet | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 16 Jul 2026 | 19 Jul 2026 | Unknown |
| CVE-2026-21643 | Fortinet | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 13 Apr 2026 | 16 Apr 2026 | Unknown |
| CVE-2026-35616 | Fortinet | FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | 6 Apr 2026 | 9 Apr 2026 | Unknown |
| CVE-2026-24858 | Fortinet | Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 27 Jan 2026 | 30 Jan 2026 | Unknown |
| CVE-2025-59718 | Fortinet | Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 16 Dec 2025 | 23 Dec 2025 | Unknown |
| CVE-2025-58034 | Fortinet | FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | 18 Nov 2025 | 25 Nov 2025 | Unknown |
| CVE-2025-64446 | Fortinet | FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | 14 Nov 2025 | 21 Nov 2025 | Unknown |
| CVE-2025-25257 | Fortinet | FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | 18 Jul 2025 | 8 Aug 2025 | Unknown |
| CVE-2019-6693 | Fortinet | FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 25 Jun 2025 | 16 Jul 2025 | Known |
| CVE-2025-32756 | Fortinet | Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 14 May 2025 | 4 Jun 2025 | Unknown |
| CVE-2025-24472 | Fortinet | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 18 Mar 2025 | 8 Apr 2025 | Known |
| CVE-2024-55591 | Fortinet | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 14 Jan 2025 | 21 Jan 2025 | Known |
| CVE-2024-47575 | Fortinet | FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | 23 Oct 2024 | 13 Nov 2024 | Unknown |
| CVE-2024-23113 | Fortinet | Multiple Products | Fortinet Multiple Products Format String Vulnerability | 9 Oct 2024 | 30 Oct 2024 | Unknown |
| CVE-2023-48788 | Fortinet | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 25 Mar 2024 | 15 Apr 2024 | Known |
| CVE-2024-21762 | Fortinet | FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | 9 Feb 2024 | 16 Feb 2024 | Known |
| CVE-2023-27997 | Fortinet | FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 13 Jun 2023 | 4 Jul 2023 | Known |
| CVE-2022-41328 | Fortinet | FortiOS | Fortinet FortiOS Path Traversal Vulnerability | 14 Mar 2023 | 4 Apr 2023 | Unknown |
| CVE-2022-42475 | Fortinet | FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 13 Dec 2022 | 3 Jan 2023 | Known |
| CVE-2022-40684 | Fortinet | Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | 11 Oct 2022 | 1 Nov 2022 | Known |
| CVE-2018-13374 | Fortinet | FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 8 Sep 2022 | 29 Sep 2022 | Known |
| CVE-2018-13382 | Fortinet | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | 10 Jan 2022 | 10 Jul 2022 | Known |
| CVE-2018-13383 | Fortinet | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | 10 Jan 2022 | 10 Jul 2022 | Known |
| CVE-2021-44168 | Fortinet | FortiOS | Fortinet FortiOS Arbitrary File Download | 10 Dec 2021 | 24 Dec 2021 | Unknown |
| CVE-2018-13379 | Fortinet | FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2019-5591 | Fortinet | FortiOS | Fortinet FortiOS Default Configuration Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |
| CVE-2020-12812 | Fortinet | FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 3 Nov 2021 | 3 May 2022 | Known |