FortiSASE vulnerabilities | LiveThreat CVE Feed

Product

FortiSASE

by Fortinet · last CVE Oct 13, 2026

On CISA KEVExploited in the wild

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities12 In the news1 Timeline

Severity mix

Critical 1High 1Medium 9Low 1

Severity

All severities12 Critical1 High1 Medium9 Low1

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add FortiSASE to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-25249 In wildKEV	9.8	4%	Jan 13	Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Affected: 25.1.39; 25.1.51
CVE-2025-58413	7.5	0%	Nov 18	A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4… Affected: 25.3.b
CVE-2026-59837	6.6	1%	Jul 14	A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM… Affected: 26.1.1 through 26.1.2
CVE-2024-47570	6.6	0%	Dec 9	An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3,… Affected: 24.1.37
CVE-2025-24471	6.5	0%	Jun 10	An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from… Affected: 25.1.39
CVE-2025-31366	6.1	0%	Oct 14	An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS… Affected: 25.2.a
CVE-2025-47890	6.1	0%	Oct 14	An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions,… Affected: 25.2.a
CVE-2024-55599	5.3	0%	Jul 8	An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy… Affected: 24.4.32
CVE-2024-50562	4.8	1%	Jun 10	An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions… Affected: 24.4.60
CVE-2024-47569	4.3	0%	Oct 14	A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions,… Affected: 24.3.20
CVE-2025-25250	4.3	1%	Jun 10	An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all… Affected: 25.1.c
CVE-2026-106175	2.3	0%	Oct 13	A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6,… Affected: 25.4.c