Fortimanager Cloud vulnerabilities | LiveThreat CVE Feed

Product

Fortimanager Cloud

by Fortinet · last CVE Aug 12, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities28 In the news1 Timeline

Severity mix

Critical 5High 18Medium 3Low 2

Severity

All severities28 Critical5 High18 Medium3 Low2

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Fortimanager Cloud to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-47575 In wildKEV	9.8	95%	Oct 23	Fortinet FortiManager Missing Authentication Vulnerability Affected: 6.4.1 through 6.4.7; 7.0.1 before 7.0.13; 7.2.1 before 7.2.8; 7.4.1 before 7.4.5
CVE-2024-50563	9.8	1%	Jan 16	A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3,… Affected: 7.4.1 before 7.4.4
CVE-2024-48886	9.8	0%	Jan 14	A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4,… Affected: 7.4.1 before 7.4.4
CVE-2024-35276	9.8	0%	Jan 14	A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer… Affected: 6.4.1 before 7.0.12; 7.2.1 before 7.2.6; 7.4.1 before 7.4.4
CVE-2024-48884	9.1	15%	Jan 14	A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3,… Affected: 7.4.1 before 7.4.4
CVE-2024-46662	8.8	2%	Mar 14	A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1… Affected: 7.4.1 before 7.4.4
CVE-2024-50566	8.8	1%	Jan 14	A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1, FortiManager Cloud… Affected: 7.2.2 before 7.2.8; 7.4.0 before 7.4.5; 7.6.0 before 7.6.2
CVE-2024-35275	8.8	1%	Jan 14	A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through… Affected: 7.4.1 before 7.4.3
CVE-2024-35273	8.8	1%	Jan 14	A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially… Affected: 7.4.1 before 7.4.3
CVE-2026-70468	8.1	0%	Aug 12	A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9,… Affected: 7.2.5 before 7.2.10; 7.4.3 through 7.4.6; 7.6.1
CVE-2026-22828	8.1	1%	Apr 14	A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote unauthenticated attacker… Affected: 7.6.2 before 7.6.5
CVE-2024-45331	7.8	0%	Jan 16	A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4… Affected: 7.0.1 before 7.2.7; 7.4.1 before 7.4.4
CVE-2024-33503	7.8	0%	Jan 14	A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions,… Affected: 7.0.1 before 7.2.7; 7.4.1 before 7.4.4
CVE-2024-33504	7.7	0%	Feb 11	A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all… Affected: 6.4.1 before 7.2.9; 7.4.1 before 7.4.6
CVE-2024-35277	7.5	1%	Jan 14	A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through… Affected: 7.0.1 before 7.0.13; 7.2.1 before 7.2.7; 7.4.1 before 7.4.3
CVE-2024-33505	7.3	0%	Nov 12	A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0… Affected: 6.4.1 before 7.2.7; 7.4.1 before 7.4.3
CVE-2025-61848	7.2	1%	Apr 14	An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through… Affected: 7.0.0 before 7.4.9; 7.6.0 before 7.6.5
CVE-2026-22572	7.2	1%	Mar 10	An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2… Affected: 7.2.2 before 7.4.8; 7.6.0 before 7.6.4
CVE-2025-68648	7.2	1%	Mar 10	A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions,… Affected: 7.0.0 before 7.4.8; 7.6.0 before 7.6.5
CVE-2025-48418	7.2	1%	Mar 10	A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0… Affected: 6.4.1 before 7.0.15; 7.2.1 before 7.2.11; 7.4.1 before 7.4.8; 7.6.2 before 7.6.4
CVE-2024-50571	7.2	1%	Oct 14	A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0… Affected: 6.4.1 before 7.0.14; 7.2.1 before 7.2.10; 7.4.1 before 7.4.6; 7.6.2
CVE-2024-40584	7.2	2%	Feb 11	An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0… Affected: 6.4.1 through 7.0.14; 7.2.1 before 7.2.6; 7.4.1 before 7.4.4
CVE-2024-48889	7.2	2%	Dec 18	An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version 7.4.4 and below,… Affected: 7.0.1 before 7.0.13; 7.2.1 before 7.2.8; 7.4.1 before 7.4.5
CVE-2025-68649	6.5	0%	Apr 14	An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7,… Affected: 7.0.0 before 7.4.8; 7.6.0 before 7.6.5
CVE-2024-52964	6.5	1%	Aug 12	An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5,… Affected: 6.4.1 through 7.0.13; 7.2.1 before 7.2.10; 7.4.1 before 7.4.6
CVE-2024-47569	4.3	0%	Oct 14	A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions,… Affected: 7.4.1 before 7.4.4
CVE-2026-22629	3.7	0%	Mar 10	An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions, FortiAnalyzer 7.2 all… Affected: 6.4.0 before 7.6.5
CVE-2025-24474	2.7	0%	Jul 8	An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all… Affected: 6.4.1 before 7.4.7