FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
284
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 147Low 11
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-26103 | 8.8 | Dec 8 | An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison… Affected: 5.6.0 through 5.6.14; 6.0.0 through 6.0.13; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0 |
| CVE-2021-24018 | 8.8 | Aug 4 | A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute… Affected: before 6.2.10; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2018-13371 | 8.8 | Apr 2 | An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component Affected: through 5.4.10; 5.6.0 through 5.6.7; 6.0.0 through 6.0.2 |
| CVE-2022-26122 | 8.6 | Nov 2 | An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below… Affected: 6.0.0 through 6.0.15; 6.2.0 through 6.2.11; 6.4.0 through 6.4.10; 7.0.0 through 7.0.6; 7.2.0 |
| CVE-2022-42476 | 8.2 | Mar 7 | A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0… Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.8; 6.4.0 through 6.4.11; 6.2.0 through 6.2.12 |
| CVE-2026-84393 | 8.1 | Sep 8 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information… Affected: 7.6.1 through 7.6.6 |
| CVE-2026-71407 | 8.1 | Aug 12 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection… Affected: 7.6.1 through 7.6.6 |
| CVE-2026-22153 | 8.1 | Feb 10 | An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP… Affected: 7.6.0 through 7.6.4 |
| CVE-2024-26009 | 8.1 | Aug 12 | An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all… Affected: 6.0.0 before 6.2.17; 6.4.0 before 6.4.16 |
| CVE-2024-35279 | 8.1 | Feb 11 | A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to… Affected: 7.2.4 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2023-42790 | 8.1 | Mar 12 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14,… Affected: 6.2.0 through 6.2.15; 6.4.0 through 6.4.14; 7.0.0 through 7.0.12; 7.2.0 through 7.2.5; 7.4.0 through 7.4.1 |
| CVE-2022-41335 | 8.1 | Feb 16 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1,… Affected: 6.2.0 through 6.2.12; 6.4.0 through 6.4.10; 7.0.0 through 7.0.8; 7.2.0; 7.2.1; 7.2.2 |
| CVE-2022-30307 | 8.1 | Nov 2 | A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to… Affected: FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below |
| CVE-2018-9185 | 8.1 | Jul 5 | An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when… Affected: through 6.0.0 |
| CVE-2021-44171 | 8.0 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through… Affected: FortiOS 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0 |
| CVE-2023-46718 | 7.8 | Oct 14 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16… Affected: 7.4.0 through 7.4.1; 7.2.0 through 7.2.11; 7.0.0 through 7.0.18; 6.4.6 through 6.4.16; 6.2.9 through 6.2.17; 6.0.13 through 6.0.18 |
| CVE-2024-23110 | 7.8 | Jun 11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all… Affected: 6.0.0 before 6.2.16; 6.4.0 before 6.4.15; 7.0.0 before 7.0.14; 7.2.0 before 7.2.7; 7.4.0 before 7.4.3 |
| CVE-2023-46720 | 7.8 | Jun 11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16… Affected: 6.0.13 through 6.0.18; 6.2.9 through 6.2.16; 6.4.6 through 6.4.15; 7.0.0 through 7.0.12; 7.2.0 before 7.2.8; 7.4.0 before 7.4.3 |
| CVE-2023-22639 | 7.8 | Jun 13 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2,… Affected: 6.0.0 through 6.0.17; 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.9; 7.2.0 through 7.2.3 |
| CVE-2022-43953 | 7.8 | Jun 13 | A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2,… Affected: 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.11; 7.2.0 through 7.2.4 |
| CVE-2022-22299 | 7.8 | Aug 5 | A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0… Affected: 5.0.0 through 5.0.14; 5.2.0 through 5.2.15; 5.4.0 through 5.4.13; 5.6.0 through 5.6.14; 6.0.0 through 6.0.14; 6.2.0 through 6.2.10; +2 more |
| CVE-2021-26110 | 7.8 | Dec 8 | An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and… Affected: 5.6.0 through 5.6.14; 6.0.0 through 6.0.12; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0 |
| CVE-2026-106174 New | 7.5 | Oct 27 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial… Affected: 8.0.0; 7.6.4 through 7.6.6 |
| CVE-2025-53843 | 7.5 | Nov 18 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16 |
| CVE-2025-58413 | 7.5 | Nov 18 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16; 6.2.0 through 6.2.17; +1 more |
| CVE-2025-25253 | 7.5 | Oct 14 | An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions… Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18 |
| CVE-2024-50565 | 7.5 | Apr 8 | A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through… Affected: 6.4.0 before 7.0.16; 7.2.0 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2024-26013 | 7.5 | Apr 8 | A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through… Affected: 6.4.0 before 7.0.16; 7.2.0 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2024-46670 | 7.5 | Jan 14 | An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE… Affected: 7.2.0 before 7.2.10; 7.4.0 before 7.4.5; 7.6.0 |
| CVE-2024-46668 | 7.5 | Jan 14 | An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through… Affected: 6.4.0 before 6.4.16; 7.0.0 before 7.0.16; 7.2.0 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2020-12819 | 7.5 | Dec 19 | A heap-based buffer overflow vulnerability in the processing of Link Control Protocol messages in FortiGate versions 5.6.12, 6.0.10, 6.2.4 and 6.4.1 and earlier may allow a remote… Affected: 6.4.0 through 6.4.1; 6.2.0 through 6.2.4; 6.0.0 through 6.0.10; 5.6.0 through 5.6.12 |
| CVE-2024-26010 | 7.5 | Jun 11 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.7; 7.0.0 through 7.0.14; 6.4.0 through 6.4.16; 6.2.0 through 6.2.17; 6.0.0 through 6.0.18 |
| CVE-2024-26007 | 7.5 | May 14 | An improper check or handling of exceptional conditions vulnerability [CWE-703] in Fortinet FortiOS version 7.4.1 allows an unauthenticated attacker to provoke a denial of service… Affected: 7.4.1 |
| CVE-2024-23662 | 7.5 | Apr 9 | An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7.4.0 through 7.4.1 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.15… Affected: 6.4.0 before 7.2.6; 7.4.0 before 7.4.2 |
| CVE-2023-29180 | 7.5 | Feb 22 | A null pointer dereference vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0 through 6.2.14, FortiOS… Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.11; 6.4.0 through 6.4.12; 6.2.0 through 6.2.14; 6.0.0 through 6.0.16 |
| CVE-2023-37935 | 7.5 | Oct 10 | A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view plaintext passwords… Affected: 7.0.0 through 7.0.12; 7.2.0 through 7.2.5; 7.4.0 |
| CVE-2022-35842 | 7.5 | Nov 2 | An exposure of sensitive information to an unauthorized actor vulnerabiltiy [CWE-200] in FortiOS SSL-VPN versions 7.2.0, versions 7.0.0 through 7.0.6 and versions 6.4.0 through… Affected: FortiOS 7.2.0, 7.0.6, 7.0.5, 7.0.4, 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.9, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0 |
| CVE-2022-29055 | 7.5 | Oct 10 | A access of uninitialized pointer in Fortinet FortiOS version 7.2.0, 7.0.0 through 7.0.5, 6.4.0 through 6.4.8, 6.2.0 through 6.2.10, 6.0.x, FortiProxy version 7.0.0 through 7.0.4,… Affected: 6.2.0 before 6.2.11; 6.4.0 before 6.4.10; 7.0.0 before 7.0.7; 7.2.0 |
| CVE-2022-27491 | 7.5 | Sep 6 | A improper verification of source of a communication channel in Fortinet FortiOS with IPS engine version 7.201 through 7.214, 7.001 through 7.113, 6.001 through 6.121, 5.001… Affected: 6.0.0 through 6.0.14; 6.2.0 before 6.2.11; 6.4.0 before 6.4.9; 7.0.0 before 7.0.6; 7.2.0 |
| CVE-2021-41024 | 7.5 | Dec 8 | A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may allow an unauthenticated, unauthorized attacker to inject… Affected: 7.0.0; 7.0.1 |
| CVE-2021-26108 | 7.5 | Dec 8 | A use of hard-coded cryptographic key vulnerability in the SSLVPN of FortiOS before 7.0.1 may allow an attacker to retrieve the key by reverse engineering Affected: 5.6.0 through 5.6.13; 6.0.0 through 6.0.12; 6.2.0 through 6.2.8; 6.4.0 through 6.4.5; 7.0.0 |
| CVE-2020-15938 | 7.5 | Mar 4 | When traffic other than HTTP/S (eg: SSH traffic, etc...) traverses the FortiGate in version below 6.2.5 and below 6.4.2 on port 80/443, it is not redirected to the transparent… Affected: through 6.2.5; 6.4.0 through 6.4.2 |
| CVE-2019-17655 | 7.5 | Jun 16 | A cleartext storage in a file or on disk (CWE-313) vulnerability in FortiOS SSL VPN 6.2.0 through 6.2.2, 6.0.9 and earlier and FortiProxy 2.0.0, 1.2.9 and earlier may allow an… Affected: before 6.2.3 |
| CVE-2019-15705 | 7.5 | Nov 27 | An Improper Input Validation vulnerability in the SSL VPN portal of FortiOS versions 6.2.1 and below, and 6.0.6 and below may allow an unauthenticated remote attacker to crash the… Affected: through 6.0.6; 6.2.0 through 6.2.1 |
| CVE-2019-15703 | 7.5 | Oct 24 | An Insufficient Entropy in PRNG vulnerability in Fortinet FortiOS 6.2.1, 6.2.0, 6.0.8 and below for device not enable hardware TRNG token and models not support builtin TRNG seed… Affected: through 5.6.9; 6.0.0 before 6.0.9; 6.2.0 before 6.2.3 |
| CVE-2018-13381 | 7.5 | Jun 4 | A buffer overflow vulnerability in Fortinet FortiOS 6.0.0 through 6.0.4, 5.6.0 through 5.6.7, 5.4 and earlier versions and FortiProxy 2.0.0, 1.2.8 and earlier versions under SSL… Affected: through 5.2.14; 5.4.0 through 5.4.12; 5.6.0 through 5.6.10; 6.0.0 through 6.0.4 |
| CVE-2018-13376 | 7.5 | Nov 27 | An uninitialized memory buffer leak exists in Fortinet FortiOS 5.6.1 to 5.6.3, 5.4.6 to 5.4.7, 5.2 all versions under web proxy's disclaimer response web pages, potentially… Affected: through 5.2.12; 5.4.6 through 5.4.7; 5.6.1 through 5.6.3 |
| CVE-2017-3130 | 7.5 | Aug 10 | An information disclosure vulnerability in Fortinet FortiOS 5.6.0, 5.4.4 and below versions allows attacker to get FortiOS version info by inspecting FortiOS IKE VendorID packets Affected: 5.0.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +26 more |
| CVE-2022-39948 | 7.4 | Feb 16 | An improper certificate validation vulnerability [CWE-295] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions and FortiProxy… Affected: 6.0.0 before 7.0.8; 7.2.0 before 7.2.4 |
| CVE-2021-24012 | 7.3 | Jun 2 | An improper following of a certificate's chain of trust vulnerability in FortiGate versions 6.4.0 to 6.4.4 may allow an LDAP user to connect to SSLVPN with any certificate that is… Affected: 6.4.0 before 6.4.5 |