FO
Product
FortiAnalyzer
On CISA KEVExploited in the wild
97
CVEs
1
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 6High 32Medium 52Low 7
Watch
Add FortiAnalyzer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 7.6.0 through 7.6.5; 7.4.0 through 7.4.9; 7.2.0 through 7.2.11; 7.0.0 through 7.0.15 |
| CVE-2023-25610 | 9.8 | Mar 24 | A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0… Affected: 6.0.0 before 6.0.12; 6.2.0 before 6.2.11; 6.4.0 before 6.4.12; 7.0.0 before 7.0.5; 7.2.0 |
| CVE-2024-50563 | 9.8 | Jan 16 | A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3,… Affected: 7.4.1 before 7.4.4; 7.6.0 before 7.6.2 |
| CVE-2024-48886 | 9.8 | Jan 14 | A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4,… Affected: 7.4.1 before 7.4.4; 7.6.0 before 7.6.2 |
| CVE-2024-35276 | 9.8 | Jan 14 | A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer… Affected: 6.4.0 before 6.4.15; 7.0.0 before 7.0.13; 7.2.0 before 7.2.6; 7.4.0 before 7.4.4 |
| CVE-2021-32589 | 9.8 | Dec 19 | A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.7 and below, version 6.0.10 and below, version 5.6.10 and below,… Affected: 7.0.0; 6.4.0 through 6.4.5; 6.2.0 through 6.2.7; 6.0.0 through 6.0.10; 5.6.0 through 5.6.10; 5.4.0 through 5.4.7; +2 more |
Showing 6