RCE via stale global state

HTTP/2 Rapid Reset Attack Vulnerability

Stored Cross-Site Scripting (XSS) in Assets and Nodes in Guardian/CMC before 26.0.0

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code…

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions;…

An arbitrary file write vulnerability was found in GNU gzip's zgrep utility

A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information…

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection…

Incorrect privilege assignment for Arc sensors in Guardian/CMC before 26.2.0

PAN-OS: Authentication Bypass with Cloud Authentication Service (CAS) enabled

Incorrect authorization for Threat Intelligence in Guardian/CMC before 26.0.0

Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0

PAN-OS: Information Disclosure Vulnerability in URL Filtering

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Processing

DoS through oversized audit log entries in Guardian/CMC before 26.2.0

PAN-OS: Buffer Overflow Vulnerabilities in User-ID Terminal Server Agent

PAN-OS: Denial of Service Vulnerabilities in Network Traffic Parsing

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions…

Incorrect authorization in Credentials Manager in Guardian/CMC before 26.3.0

X.400 address type confusion in X.509 GeneralName

PAN-OS: Buffer Overflow Vulnerability via XML Processing

PAN-OS: IPv6 Firewall Policy Bypass

PAN-OS: Authentication Bypass Vulnerability in Large Scale VPN (LSVPN)

PAN-OS: Authenticated Command Injection in CLI

PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI

PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI)

PAN-OS: Authenticated Admin Command Injection Vulnerability

An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all…

PAN-OS: Information Disclosure Vulnerability in Management Web Interface

Open Redirect in SAML Single Sign-On in Guardian/CMC before 26.2.0