FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
282
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 146Low 10
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 7.6.0 through 7.6.5; 7.4.0 through 7.4.10; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18 |
| CVE-2025-25249 In wildKEV | 9.8 | Jan 13 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.7; 7.2.4 through 7.2.11 |
| CVE-2025-59718 In wildKEV | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.0 through 7.0.17 |
| CVE-2024-55591 RansomwareIn wildKEV | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Affected: 7.0.0 through 7.0.16 |
| CVE-2024-23113 In wildKEV | 9.8 | Feb 15 | Fortinet Multiple Products Format String Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.6; 7.0.0 through 7.0.13 |
| CVE-2024-21762 RansomwareIn wildKEV | 9.8 | Feb 9 | Fortinet FortiOS Out-of-Bound Write Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.6; 7.0.0 through 7.0.13; 6.4.0 through 6.4.14; 6.2.0 through 6.2.15; 6.0.0 through 6.0.18 |
| CVE-2023-27997 RansomwareIn wildKEV | 9.8 | Jun 13 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.11; 6.4.0 through 6.4.12; 6.2.0 through 6.2.13; 6.0.0 through 6.0.16 |
| CVE-2022-42475 RansomwareIn wildKEV | 9.8 | Jan 2 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.2; 7.0.0 through 7.0.8; 6.4.0 through 6.4.10; 6.2.0 through 6.2.11; 6.0.0 through 6.0.15; 5.6.0 through 5.6.14; +3 more |
| CVE-2022-40684 RansomwareIn wildKEV | 9.8 | Oct 18 | Fortinet Multiple Products Authentication Bypass Vulnerability Affected: 7.0.0 before 7.0.7; 7.2.0 before 7.2.2 |
| CVE-2020-12812 RansomwareIn wildKEV | 9.8 | Jul 24 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Affected: FortiOS 6.4.0, 6.2.0 to 6.2.3, 6.0.9 and below |
| CVE-2018-13379 RansomwareIn wildKEV | 9.8 | Jun 4 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability Affected: 5.4.6 before 5.4.13; 5.6.3 before 5.6.8; 6.0.0 before 6.0.5 |
Showing 11