FO
Product
FortiProxy
On CISA KEVExploited in the wildRansomware-linked
131
CVEs
13
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 17High 40Medium 69Low 5
Watch
Add FortiProxy to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-24858 In wildKEV | 9.8 | Jan 27 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Affected: 7.6.0 through 7.6.4; 7.4.0 through 7.4.12; 7.2.0 through 7.2.15; 7.0.0 through 7.0.22 |
| CVE-2025-59718 In wildKEV | 9.8 | Dec 9 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Affected: 7.6.0 through 7.6.3; 7.4.0 through 7.4.10; 7.2.0 through 7.2.14; 7.0.0 through 7.0.21 |
| CVE-2024-55591 RansomwareIn wildKEV | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Affected: 7.2.0 through 7.2.12; 7.0.0 through 7.0.19 |
| CVE-2024-23113 In wildKEV | 9.8 | Feb 15 | Fortinet Multiple Products Format String Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.8; 7.0.0 through 7.0.15 |
| CVE-2024-21762 RansomwareIn wildKEV | 9.8 | Feb 9 | Fortinet FortiOS Out-of-Bound Write Vulnerability Affected: 7.4.0 through 7.4.2; 7.2.0 through 7.2.8; 7.0.0 through 7.0.14; 2.0.0 through 2.0.13; 1.2.1 through 1.2.13; 01.02.00; +3 more |
| CVE-2023-27997 RansomwareIn wildKEV | 9.8 | Jun 13 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.3; 7.0.0 through 7.0.9; 2.0.0 through 2.0.12; 1.2.0 through 1.2.13; 1.1.0 through 1.1.6 |
| CVE-2022-42475 RansomwareIn wildKEV | 9.8 | Jan 2 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Affected: 7.2.0 through 7.2.1; 7.0.0 through 7.0.7; 2.0.0 through 2.0.11; 1.2.0 through 1.2.13; 1.1.0 through 1.1.6; 1.0.0 through 1.0.7 |
| CVE-2022-40684 RansomwareIn wildKEV | 9.8 | Oct 18 | Fortinet Multiple Products Authentication Bypass Vulnerability Affected: 7.0.0 before 7.0.7; 7.2.0 |
| CVE-2018-13379 RansomwareIn wildKEV | 9.8 | Jun 4 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability Affected: before 1.2.9; 2.0.0 |
| CVE-2023-25610 | 9.8 | Mar 24 | A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0… Affected: 1.1.0 before 7.0.9; 7.2.0 before 7.2.3 |
| CVE-2024-48886 | 9.8 | Jan 14 | A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4,… Affected: 2.0.0 before 2.0.15; 7.0.0 before 7.0.18; 7.2.0 before 7.2.11; 7.4.0 before 7.4.5 |
| CVE-2024-26011 | 9.8 | Nov 12 | A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11,… Affected: 7.4.0 through 7.4.3; 7.2.0 through 7.2.9; 7.0.0 through 7.0.16; 2.0.0 through 2.0.14; 1.2.1 through 1.2.13; 01.02.00; +3 more |
| CVE-2023-42789 | 9.8 | Mar 12 | A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through 6.4.14, FortiOS 6.2.0… Affected: 2.0.0 through 2.0.13; 7.0.0 through 7.0.12; 7.2.0 through 7.2.6; 7.4.0 |
| CVE-2023-33308 | 9.8 | Jul 26 | A stack-based overflow vulnerability [CWE-124] in Fortinet FortiOS version 7.0.0 through 7.0.10 and 7.2.0 through 7.2.3 and FortiProxy version 7.0.0 through 7.0.9 and 7.2.0… Affected: 7.0.0 through 7.0.9; 7.2.0; 7.2.1; 7.2.2 |
| CVE-2022-41331 | 9.8 | Apr 11 | A missing authentication for critical function vulnerability [CWE-306] in FortiPresence infrastructure server before version 1.2.1 allows a remote, unauthenticated attacker to… Affected: 1.0.0 before 2.0.0 |
| CVE-2022-35843 | 9.8 | Dec 6 | An authentication bypass by assumed-immutable data vulnerability [CWE-302] in the FortiOS SSH login component 7.2.0, 7.0.0 through 7.0.7, 6.4.0 through 6.4.9, 6.2 all versions,… Affected: 1.2.0 through 1.2.13; 2.0.0 through 2.0.10; 7.0.0 through 7.0.6 |
| CVE-2024-48884 | 9.1 | Jan 14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3,… Affected: 7.4.0 through 7.4.5; 7.2.0 through 7.2.11; 7.0.0 through 7.0.18; 2.0.0 through 2.0.14; 1.2.1 through 1.2.13; 01.02.00; +3 more |
Showing 17