FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
284
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 147Low 11
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 7.6.0 through 7.6.5; 7.4.0 through 7.4.10; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18 |
| CVE-2025-25249 In wildKEV | 9.8 | Jan 13 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.7; 7.2.4 through 7.2.11 |
| CVE-2025-59718 In wildKEV | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.0 through 7.0.17 |
| CVE-2024-55591 RansomwareIn wildKEV | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Affected: 7.0.0 through 7.0.16 |
| CVE-2024-23113 In wildKEV | 9.8 | Feb 15 | Fortinet Multiple Products Format String Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.6; 7.0.0 through 7.0.13 |
| CVE-2024-21762 RansomwareIn wildKEV | 9.8 | Feb 9 | Fortinet FortiOS Out-of-Bound Write Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.6; 7.0.0 through 7.0.13; 6.4.0 through 6.4.14; 6.2.0 through 6.2.15; 6.0.0 through 6.0.18 |
| CVE-2023-27997 RansomwareIn wildKEV | 9.8 | Jun 13 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.11; 6.4.0 through 6.4.12; 6.2.0 through 6.2.13; 6.0.0 through 6.0.16 |
| CVE-2022-42475 RansomwareIn wildKEV | 9.8 | Jan 2 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.2; 7.0.0 through 7.0.8; 6.4.0 through 6.4.10; 6.2.0 through 6.2.11; 6.0.0 through 6.0.15; 5.6.0 through 5.6.14; +3 more |
| CVE-2022-40684 RansomwareIn wildKEV | 9.8 | Oct 18 | Fortinet Multiple Products Authentication Bypass Vulnerability Affected: 7.0.0 before 7.0.7; 7.2.0 before 7.2.2 |
| CVE-2020-12812 RansomwareIn wildKEV | 9.8 | Jul 24 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Affected: FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below |
| CVE-2018-13379 RansomwareIn wildKEV | 9.8 | Jun 4 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability Affected: 5.4.6 before 5.4.13; 5.6.3 before 5.6.8; 6.0.0 before 6.0.5 |
| CVE-2025-24472 RansomwareIn wildKEV | 8.1 | Feb 11 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Affected: 7.0.0 through 7.0.16 |
| CVE-2021-44168 In wildKEV | 7.8 | Jan 4 | Fortinet FortiOS Arbitrary File Download Affected: FortiOS before 7.0.3 |
| CVE-2018-13382 RansomwareIn wildKEV | 7.5 | Jun 4 | Fortinet FortiOS and FortiProxy Improper Authorization Affected: 5.4.1 before 5.4.11; 5.6.0 before 5.6.9; 6.0.0 before 6.0.5 |
| CVE-2022-41328 In wildKEV | 7.1 | Mar 7 | Fortinet FortiOS Path Traversal Vulnerability Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.9; 6.4.0 through 6.4.11; 6.2.0 through 6.2.13; 6.0.0 through 6.0.16 |
| CVE-2025-61624 In wildKEV | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability Affected: 7.6.0 through 7.6.4; 7.4.0 through 7.4.9; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2019-5591 RansomwareIn wildKEV | 6.5 | Aug 14 | Fortinet FortiOS Default Configuration Vulnerability Affected: FortiOS 6.2.0 and below. |
| CVE-2019-6693 RansomwareIn wildKEV | 6.5 | Nov 21 | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Affected: 5.6.9 and below; 6.0.5 and below; 6.2.0 |
| CVE-2018-13383 RansomwareIn wildKEV | 6.5 | May 29 | Fortinet FortiOS and FortiProxy Out-of-bounds Write Affected: 5.2.0 before 5.2.15; 5.4.0 before 5.4.13; 5.6.0 before 5.6.11; 6.0.0 before 6.0.5 |
| CVE-2025-68686 In wildKEV | 5.9 | Feb 10 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Affected: 7.6.0 through 7.6.1; 7.4.0 through 7.4.6; 7.2.0 through 7.2.13; 7.0.0 through 7.0.19; 6.4.0 through 6.4.16 |
| CVE-2018-13374 RansomwareIn wildKEV | 4.3 | Jan 22 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Affected: before 6.0.3 |
Showing 21