FO
Product
FortiSwitchManager
On CISA KEVExploited in the wildRansomware-linked
21
CVEs
5
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 7Medium 6Low 1
Watch
Add FortiSwitchManager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-61624 In wildKEV | 6.5 | Apr 14 | Fortinet Multiple Products Path Traversal Vulnerability Affected: 7.2.0 through 7.2.7; 7.0.0 through 7.0.6 |
| CVE-2023-40721 | 6.7 | Feb 11 | A use of externally-controlled format string vulnerability [CWE-134] vulnerability in Fortinet allows a privileged attacker to execute arbitrary code or commands via specially… Affected: 7.0.0 before 7.0.3; 7.2.0 before 7.2.3 |
| CVE-2023-36640 | 6.7 | May 14 | A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2… Affected: 7.0.0 through 7.0.2; 7.2.0 through 7.2.2 |
| CVE-2024-26008 | 5.3 | Oct 14 | An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and… Affected: 7.0.0 before 7.0.4; 7.2.0 before 7.2.4 |
| CVE-2026-59840 | 4.3 | Jul 14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all… Affected: 7.2.0 through 7.2.7; 7.0.0 through 7.0.6 |
| CVE-2023-36635 | 4.3 | Sep 7 | An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to modify the interface… Affected: 7.0.0; 7.0.1; 7.2.0; 7.2.1; 7.2.2 |
Showing 6