FO
Network Security
FortiOS
On CISA KEVExploited in the wildRansomware-linked
282
CVEs
21
On KEV
9.8
Max CVSS
2
New 30D
Severity mix
Critical 23High 86Medium 146Low 10
Watch
Add FortiOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-24472 RansomwareIn wildKEV | 8.1 | Feb 11 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Affected: 7.0.0 through 7.0.16 |
| CVE-2021-44168 In wildKEV | 7.8 | Jan 4 | Fortinet FortiOS Arbitrary File Download Affected: FortiOS before 7.0.3 |
| CVE-2018-13382 RansomwareIn wildKEV | 7.5 | Jun 4 | Fortinet FortiOS and FortiProxy Improper Authorization Affected: 5.4.1 before 5.4.11; 5.6.0 before 5.6.9; 6.0.0 before 6.0.5 |
| CVE-2022-41328 In wildKEV | 7.1 | Mar 7 | Fortinet FortiOS Path Traversal Vulnerability Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.9; 6.4.0 through 6.4.11; 6.2.0 through 6.2.13; 6.0.0 through 6.0.16 |
| CVE-2025-53844 | 8.8 | May 12 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.0 through 7.0.17; 6.4.0 through 6.4.16; 6.2.0 through 6.2.17; +1 more |
| CVE-2025-53847 | 8.8 | Apr 14 | A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.11; 7.0.0 through 7.0.17; 6.4.0 through 6.4.16; 6.2.9 through 6.2.17 |
| CVE-2025-57740 | 8.8 | Oct 14 | An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions;… Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.7; 7.2.0 through 7.2.10; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16 |
| CVE-2023-37930 | 8.8 | Apr 8 | Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vulnerabilities vulnerability in Fortinet allows a VPN user to corrupt… Affected: 6.4.7 before 6.4.15; 7.0.1 before 7.0.13; 7.2.0 before 7.2.6; 7.4.0 |
| CVE-2020-12820 | 8.8 | Dec 19 | Under non-default configuration, a stack-based buffer overflow in FortiOS version 6.0.10 and below, version 5.6.12 and below may allow a remote attacker authenticated to the SSL… Affected: 6.0.0 through 6.0.10; 5.6.0 through 5.6.12 |
| CVE-2023-50176 | 8.8 | Nov 12 | A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute unauthorized code or… Affected: 7.0.0 before 7.0.14; 7.2.0 before 7.2.8; 7.4.0 before 7.4.4 |
| CVE-2022-45862 | 8.8 | Aug 13 | An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all… Affected: 6.4.0 before 7.2.6 |
| CVE-2023-41677 | 8.8 | Apr 9 | A insufficiently protected credentials vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through… Affected: 7.4.0 through 7.4.1; 7.2.0 through 7.2.6; 7.0.0 through 7.0.12; 6.4.0 through 6.4.14; 6.2.0 through 6.2.15; 6.0.0 through 6.0.18 |
| CVE-2023-46717 | 8.8 | Mar 12 | An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with… Affected: 7.0.0 before 7.0.13; 7.2.0 before 7.2.7; 7.4.0 before 7.4.2 |
| CVE-2023-29181 | 8.8 | Feb 22 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4, FortiOS 7.0.0 through 7.0.11, FortiOS 6.4.0 through 6.4.12, FortiOS 6.2.0… Affected: 7.2.0 through 7.2.4; 7.0.0 through 7.0.11; 6.4.0 through 6.4.12; 6.2.0 through 6.2.14; 6.0.0 through 6.0.16; 5.6.0 through 5.6.14; +7 more |
| CVE-2023-44250 | 8.8 | Jan 10 | An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 through 7.4.1 and 7.2.5 and in a FortiProxy HA cluster version 7.4.0… Affected: 7.2.5; 7.4.0; 7.4.1 |
| CVE-2023-41678 | 8.8 | Dec 13 | A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands… Affected: 7.0.0; 7.0.1; 7.0.2; 7.0.3; 7.0.4; 7.0.5 |
| CVE-2023-36639 | 8.8 | Dec 13 | A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through… Affected: 6.0.0 through 6.0.17; 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.11; 7.2.0 through 7.2.4; 7.4.0 |
| CVE-2023-41841 | 8.8 | Oct 10 | An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform elevated actions Affected: 7.0.0 through 7.0.11; 7.2.0 through 7.2.4 |
| CVE-2023-22640 | 8.8 | May 3 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.10, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0 through 6.2.13, FortiOS… Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.10; 6.4.0 through 6.4.11; 6.2.0 through 6.2.13; 6.0.0 through 6.0.16 |
| CVE-2022-43947 | 8.8 | Apr 11 | An improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiOS version 7.2.0 through 7.2.3 and before 7.0.10, FortiProxy version 7.2.0… Affected: 6.2.0 before 6.4.13; 7.0.0 before 7.0.11; 7.2.0 before 7.2.4 |
| CVE-2021-36173 | 8.8 | Dec 8 | A heap-based buffer overflow in the firmware signature verification function of FortiOS versions 7.0.1, 7.0.0, 6.4.0 through 6.4.6, 6.2.0 through 6.2.9, and 6.0.0 through 6.0.13… Affected: 6.0.0 through 6.0.13; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0; 7.0.1 |
| CVE-2021-26103 | 8.8 | Dec 8 | An insufficient verification of data authenticity vulnerability (CWE-345) in the user interface of FortiProxy verison 2.0.3 and below, 1.2.11 and below and FortiGate verison… Affected: 5.6.0 through 5.6.14; 6.0.0 through 6.0.13; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0 |
| CVE-2021-24018 | 8.8 | Aug 4 | A buffer underwrite vulnerability in the firmware verification routine of FortiOS before 7.0.1 may allow an attacker located in the adjacent network to potentially execute… Affected: before 6.2.10; 6.4.0 before 6.4.7; 7.0.0 |
| CVE-2018-13371 | 8.8 | Apr 2 | An external control of system vulnerability in FortiOS may allow an authenticated, regular user to change the routing settings of the device via connecting to the ZebOS component Affected: through 5.4.10; 5.6.0 through 5.6.7; 6.0.0 through 6.0.2 |
| CVE-2022-26122 | 8.6 | Nov 2 | An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below… Affected: 6.0.0 through 6.0.15; 6.2.0 through 6.2.11; 6.4.0 through 6.4.10; 7.0.0 through 7.0.6; 7.2.0 |
| CVE-2022-42476 | 8.2 | Mar 7 | A relative path traversal vulnerability [CWE-23] vulnerability in Fortinet FortiOS 7.2.0 through 7.2.3, FortiOS 7.0.0 through 7.0.8, FortiOS 6.4.0 through 6.4.11, FortiOS 6.2.0… Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.8; 6.4.0 through 6.4.11; 6.2.0 through 6.2.12 |
| CVE-2026-84393 | 8.1 | Sep 8 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information… Affected: 7.6.1 through 7.6.6 |
| CVE-2026-71407 | 8.1 | Aug 12 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection… Affected: 7.6.1 through 7.6.6 |
| CVE-2026-22153 | 8.1 | Feb 10 | An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP… Affected: 7.6.0 before 7.6.5 |
| CVE-2024-26009 | 8.1 | Aug 12 | An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all… Affected: 6.0.0 before 6.2.17; 6.4.0 before 6.4.16 |
| CVE-2024-35279 | 8.1 | Feb 11 | A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to… Affected: 7.2.4 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2023-42790 | 8.1 | Mar 12 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14,… Affected: 6.2.0 through 6.2.15; 6.4.0 through 6.4.14; 7.0.0 through 7.0.12; 7.2.0 through 7.2.5; 7.4.0 through 7.4.1 |
| CVE-2022-41335 | 8.1 | Feb 16 | A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1,… Affected: 6.2.0 through 6.2.12; 6.4.0 through 6.4.10; 7.0.0 through 7.0.8; 7.2.0; 7.2.1; 7.2.2 |
| CVE-2022-30307 | 8.1 | Nov 2 | A key management error vulnerability [CWE-320] affecting the RSA SSH host key in FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below may allow an unauthenticated attacker to… Affected: FortiOS 7.2.0 and below, 7.0.6 and below, 6.4.9 and below |
| CVE-2018-9185 | 8.1 | Jul 5 | An information disclosure vulnerability in Fortinet FortiOS 6.0.0 and below versions reveals user's web portal login credentials in a Javascript file sent to client-side when… Affected: through 6.0.0 |
| CVE-2021-44171 | 8.0 | Oct 10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiOS version 6.0.0 through 6.0.14, FortiOS version 6.2.0 through… Affected: FortiOS 7.0.3, 7.0.2, 7.0.1, 7.0.0, 6.4.8, 6.4.7, 6.4.6, 6.4.5, 6.4.4, 6.4.3, 6.4.2, 6.4.1, 6.4.0, 6.2.10, 6.2.9, 6.2.8, 6.2.7, 6.2.6, 6.2.5, 6.2.4, 6.2.3, 6.2.2, 6.2.1, 6.2.0, 6.0.14, 6.0.13, 6.0.12, 6.0.11, 6.0.10, 6.0.9, 6.0.8, 6.0.7, 6.0.6, 6.0.5, 6.0.4, 6.0.3, 6.0.2, 6.0.1, 6.0.0 |
| CVE-2023-46718 | 7.8 | Oct 14 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16… Affected: 6.0.13 through 6.0.18; 6.2.9 through 6.2.17; 6.4.6 through 6.4.16; 7.0.0 before 7.2.12; 7.4.0 before 7.4.2 |
| CVE-2024-23110 | 7.8 | Jun 11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0 all… Affected: 6.0.0 before 6.2.16; 6.4.0 before 6.4.15; 7.0.0 before 7.0.14; 7.2.0 before 7.2.7; 7.4.0 before 7.4.3 |
| CVE-2023-46720 | 7.8 | Jun 11 | A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16… Affected: 6.0.13 through 6.0.18; 6.2.9 through 6.2.16; 6.4.6 through 6.4.15; 7.0.0 through 7.0.12; 7.2.0 before 7.2.8; 7.4.0 before 7.4.3 |
| CVE-2023-22639 | 7.8 | Jun 13 | A out-of-bounds write in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.10, FortiOS version 6.4.0 through 6.4.12, FortiOS all versions 6.2,… Affected: 6.0.0 through 6.0.17; 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.9; 7.2.0 through 7.2.3 |
| CVE-2022-43953 | 7.8 | Jun 13 | A use of externally-controlled format string in Fortinet FortiOS version 7.2.0 through 7.2.4, FortiOS all versions 7.0, FortiOS all versions 6.4, FortiOS all versions 6.2,… Affected: 6.2.0 through 6.2.15; 6.4.0 through 6.4.12; 7.0.0 through 7.0.11; 7.2.0 through 7.2.4 |
| CVE-2022-22299 | 7.8 | Aug 5 | A format string vulnerability [CWE-134] in the command line interpreter of FortiADC version 6.0.0 through 6.0.4, FortiADC version 6.1.0 through 6.1.5, FortiADC version 6.2.0… Affected: 5.0.0 through 5.0.14; 5.2.0 through 5.2.15; 5.4.0 through 5.4.13; 5.6.0 through 5.6.14; 6.0.0 through 6.0.14; 6.2.0 through 6.2.10; +2 more |
| CVE-2021-26110 | 7.8 | Dec 8 | An improper access control vulnerability [CWE-284] in FortiOS autod daemon 7.0.0, 6.4.6 and below, 6.2.9 and below, 6.0.12 and below and FortiProxy 2.0.1 and below, 1.2.9 and… Affected: 5.6.0 through 5.6.14; 6.0.0 through 6.0.12; 6.2.0 through 6.2.9; 6.4.0 through 6.4.6; 7.0.0 |
| CVE-2026-106174 New | 7.5 | Oct 27 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial… Affected: 8.0.0; 7.6.4 through 7.6.6 |
| CVE-2025-53843 | 7.5 | Nov 18 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16 |
| CVE-2025-58413 | 7.5 | Nov 18 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4… Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18; 6.4.0 through 6.4.16; 6.2.0 through 6.2.17; +1 more |
| CVE-2025-25253 | 7.5 | Oct 14 | An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions… Affected: 7.6.0 through 7.6.2; 7.4.0 through 7.4.8; 7.2.0 through 7.2.12; 7.0.0 through 7.0.18 |
| CVE-2024-50565 | 7.5 | Apr 8 | A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through… Affected: 6.4.0 before 7.0.16; 7.2.0 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2024-26013 | 7.5 | Apr 8 | A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through… Affected: 6.4.0 before 7.0.16; 7.2.0 before 7.2.9; 7.4.0 before 7.4.5 |
| CVE-2024-46670 | 7.5 | Jan 14 | An Out-of-bounds Read vulnerability [CWE-125] in FortiOS version 7.6.0, version 7.4.4 and below, version 7.2.9 and below and FortiSASE FortiOS tenant version 24.3.b IPsec IKE… Affected: 7.2.0 before 7.2.10; 7.4.0 before 7.4.5; 7.6.0 |