Search
Search everything
One box across CVEs, products, vendors and every brief in our feeds.
Products · 12
CVEs · 25
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2025-68686 In wildKEV | FO FortiOS Fortinet | 5.9 | Feb 10 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability |
| CVE-2025-24472 RansomwareIn wildKEV | FO FortiOS Fortinet | 8.1 | Feb 11 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
| CVE-2024-55591 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jan 14 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability |
| CVE-2024-21762 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Feb 9 | Fortinet FortiOS Out-of-Bound Write Vulnerability |
| CVE-2023-27997 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jun 13 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability |
| CVE-2022-41328 In wildKEV | FO FortiOS Fortinet | 7.1 | Mar 7 | Fortinet FortiOS Path Traversal Vulnerability |
| CVE-2022-42475 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jan 2 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability |
| CVE-2021-44168 In wildKEV | FO FortiOS Fortinet | 7.8 | Jan 4 | Fortinet FortiOS Arbitrary File Download |
| CVE-2019-5591 RansomwareIn wildKEV | FO FortiOS Fortinet | 6.5 | Aug 14 | Fortinet FortiOS Default Configuration Vulnerability |
| CVE-2020-12812 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jul 24 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability |
| CVE-2019-6693 RansomwareIn wildKEV | FO FortiOS Fortinet | 6.5 | Nov 21 | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability |
| CVE-2018-13382 RansomwareIn wildKEV | FO FortiOS Fortinet | 7.5 | Jun 4 | Fortinet FortiOS and FortiProxy Improper Authorization |
| CVE-2018-13379 RansomwareIn wildKEV | FO FortiOS Fortinet | 9.8 | Jun 4 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability |
| CVE-2018-13383 RansomwareIn wildKEV | FO FortiOS Fortinet | 6.5 | May 29 | Fortinet FortiOS and FortiProxy Out-of-bounds Write |
| CVE-2018-13374 RansomwareIn wildKEV | FO FortiOS Fortinet | 4.3 | Jan 22 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability |
| CVE-2026-106174 New | FO FortiOS Fortinet | 7.5 | Oct 27 | A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial… |
| CVE-2026-106175 | FO FortiOS Fortinet | 2.3 | Oct 13 | A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6,… |
| CVE-2026-84392 | FO FortiOS Fortinet | 2.7 | Sep 8 | A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions,… |
| CVE-2026-84393 | FO FortiOS Fortinet | 8.1 | Sep 8 | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information… |
| CVE-2026-71407 | FO FortiOS Fortinet | 8.1 | Aug 12 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection… |
| CVE-2026-71408 | FO FortiOS Fortinet | 5.3 | Aug 12 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker… |
| CVE-2026-59840 | FO FortiOS Fortinet | 4.3 | Jul 14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all… |
| CVE-2025-43892 | FO FortiOS Fortinet | 4.3 | Jul 14 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions… |
| CVE-2026-23573 | FO FortiOS Fortinet | 6.1 | Jul 14 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4… |
| CVE-2026-59839 | FO FortiOS Fortinet | 5.5 | Jul 14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2… |
Intelligence · 2
VulnerabilityMedium
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.
The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
Oct 16, 2026·The Hacker News
VulnerabilityHigh
[CISA KEV] CVE-2025-68686: Fortinet FortiOS - Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.
FOFortiOSCVE-2025-68686
Jul 27, 2026·CISA KEV