FO
Product
FortiNAC-F
On CISA KEVExploited in the wild
13
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 5Medium 4Low 0
Watch
Add FortiNAC-F to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 7.6.3 through 7.6.5 |
| CVE-2022-38375 | 9.8 | Feb 16 | An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform some administrative… Affected: before 7.2.0 |
| CVE-2022-39954 | 9.1 | Feb 16 | An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC version 9.1.0 through… Affected: before 7.2.0 |
| CVE-2023-22637 | 9.0 | May 3 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2… Affected: 7.2.0 |
| CVE-2023-26203 | 7.8 | May 3 | A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7… Affected: 7.2.0 |
| CVE-2023-22633 | 7.5 | Jun 13 | An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all… Affected: 7.2.0 |
| CVE-2022-45860 | 7.5 | May 3 | A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all… Affected: 7.2.0 |
| CVE-2022-43951 | 7.5 | Apr 11 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11 and below, 8.7.6 and… Affected: before 7.2.0 |
| CVE-2022-40675 | 7.4 | Feb 16 | Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through… Affected: before 7.2.0 |
| CVE-2026-21741 | 4.8 | Apr 14 | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all versions, FortiNAC-F… Affected: 7.6.0 through 7.6.5; 7.4.0 through 7.4.3; 7.2.0 through 7.2.9 |
| CVE-2023-48785 | 4.8 | Mar 14 | An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle… Affected: 7.2.0 before 7.2.5 |
| CVE-2022-43950 | 4.7 | May 3 | A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions, 9.1 all versions, … Affected: 7.2.0 |
| CVE-2022-45859 | 4.4 | May 3 | An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions, 8.7.0 all… Affected: 7.2.0 |
Showing 13