Login Request a demo
FO
Vendor
Fortinet
181 products with CVEs on record
1,867
CVEs
92
On KEV
28
New 30D
Products
FO
FortiOS
Network Security
9.8
282 CVEs21 on KEV2 new
FO
FortiProxy
Fortinet
9.8
131 CVEs13 on KEV1 new
FO
FortiMail
Fortinet
9.8
48 CVEs2 on KEV2 new
FO
FortiPAM
Fortinet
9.8
37 CVEs2 on KEV1 new
MP
Multiple Products
Fortinet
9.8
7 CVEs7 on KEV0 new
FO
FortiSwitchManager
Fortinet
9.8
21 CVEs5 on KEV0 new
FO
FortiManager
Network Security
9.8
118 CVEs2 on KEV4 new
FO
FortiAnalyzer
Fortinet
9.8
97 CVEs1 on KEV4 new
FO
FortiSandbox
Fortinet
9.9
65 CVEs2 on KEV3 new
FO
FortiSIEM
Fortinet
9.8
35 CVEs0 on KEV2 new
FC
FortiManager Cloud
Fortinet
9.1
7 CVEs0 on KEV2 new
FP
FortiSandbox PaaS
Fortinet
9.9
5 CVEs2 on KEV1 new
FO
FortiSASE
Fortinet
9.8
12 CVEs1 on KEV1 new
FC
FortiSandbox Cloud
Fortinet
9.9
4 CVEs1 on KEV1 new
FO
FortiSwitch
Fortinet
9.8
15 CVEs0 on KEV1 new
FC
FortiAnalyzer Cloud
Fortinet
8.8
4 CVEs0 on KEV3 new
FO
FortiWeb
Fortinet
9.8
126 CVEs4 on KEV0 new
FA
FortiOS and FortiProxy
Fortinet
9.8
4 CVEs4 on KEV0 new
FO
FortiClientEMS
Fortinet
9.8
21 CVEs3 on KEV0 new
FE
FortiClient EMS
Fortinet
9.8
3 CVEs3 on KEV0 new
FF
Fortinet FortiOS, FortiProxy
Fortinet
9.8
3 CVEs2 on KEV0 new
FO
FortiADC
Fortinet
9.8
43 CVEs1 on KEV0 new
FC
Fortimanager Cloud
Fortinet
9.8
28 CVEs1 on KEV0 new
FO
FortiVoice
Fortinet
9.8
24 CVEs1 on KEV0 new
FO
FortiNAC-F
Fortinet
9.8
13 CVEs1 on KEV0 new
FO
FortiRecorder
Fortinet
9.8
12 CVEs1 on KEV0 new
FO
FortiNDR
Fortinet
9.8
11 CVEs1 on KEV0 new
FC
Fortisandbox Cloud
Fortinet
9.8
9 CVEs1 on KEV0 new
FE
Forticlient Enterprise Management Server
Fortinet
9.8
7 CVEs1 on KEV0 new
FO
FortiOS-6K7K
Fortinet
9.8
3 CVEs1 on KEV0 new
FF
Forticamera Firmware
Fortinet
9.8
2 CVEs1 on KEV0 new
FP
Fortisandbox Paas
Fortinet
9.8
2 CVEs1 on KEV0 new
FO
FortiCamera
Fortinet
9.8
1 CVEs1 on KEV0 new
FF
Fortinet FortiOS and FortiProxy
Fortinet
6.5
1 CVEs1 on KEV0 new
FF
Fortinet FortiOS, fortiADC
Fortinet
4.3
1 CVEs1 on KEV0 new
FF
Fortinet FortiOS, FortiProxy, FortiSwitchManager
Fortinet
9.8
1 CVEs1 on KEV0 new
FA
FortiOS and FortiADC
Fortinet
4.3
1 CVEs1 on KEV0 new
FA
FortiOS and FortiProxy SSL-VPN
Fortinet
9.8
1 CVEs1 on KEV0 new
FO
Forticlient
Fortinet
9.8
86 CVEs0 on KEV0 new
FO
FortiPortal
Fortinet
9.8
45 CVEs0 on KEV0 new
FO
Fortisoar
Fortinet
9.0
31 CVEs0 on KEV0 new
FO
Fortinac
Fortinet
9.8
30 CVEs0 on KEV0 new
FO
FortiAuthenticator
Fortinet
9.8
24 CVEs0 on KEV0 new
FO
FortiWLM
Fortinet
9.8
23 CVEs0 on KEV0 new
FA
Fortinet Antivirus
Fortinet
–
18 CVEs0 on KEV0 new
FC
Fortianalyzer Cloud
Fortinet
9.8
17 CVEs0 on KEV0 new
FO
FortiTester
Fortinet
9.8
16 CVEs0 on KEV0 new
FO
FortiWAN
Fortinet
9.8
16 CVEs0 on KEV0 new
FF
Fortimanager Firmware
Fortinet
9.8
15 CVEs0 on KEV0 new
FO
FortiWLC
Fortinet
9.8
14 CVEs0 on KEV0 new
FB
Fortianalyzer Big Data
Fortinet
8.8
13 CVEs0 on KEV0 new
FF
Fortianalyzer Firmware
Fortinet
6.1
12 CVEs0 on KEV0 new
FO
FortiDeceptor
Fortinet
8.8
11 CVEs0 on KEV0 new
FO
Fortiisolator
Fortinet
9.8
10 CVEs0 on KEV0 new
FO
FortiAP-W2
Fortinet
7.8
9 CVEs0 on KEV0 new
FO
FortiClientWindows
Fortinet
8.8
8 CVEs0 on KEV0 new
FO
FortiAP
Fortinet
7.8
7 CVEs0 on KEV0 new
FO
FortiAP-U
Fortinet
8.8
7 CVEs0 on KEV0 new
FE
Forticlient Endpoint Management Server
Fortinet
9.8
7 CVEs0 on KEV0 new
FO
Fortiddos-f
Fortinet
9.1
7 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-106174
New
FO
FortiOS
Fortinet
7.5
0%
Oct 27A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial…
CVE-2026-107656
New
FO
FortiSandbox
Fortinet
9.8
1%
Oct 26An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all…
CVE-2026-106175
FO
FortiOS
Fortinet
2.3
0%
Oct 13A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6,…
CVE-2026-106172
FC
FortiSandbox Cloud
Fortinet
5.3
0%
Oct 13A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox…
CVE-2026-23707
FO
FortiManager
Fortinet
7.2
0%
Oct 13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
CVE-2026-23706
FO
FortiManager
Fortinet
6.5
0%
Oct 13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2,…
CVE-2026-23705
FO
FortiManager
Fortinet
7.2
0%
Oct 13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2,…
CVE-2025-46773
FC
FortiAnalyzer Cloud
Fortinet
8.8
0%
Oct 13An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
CVE-2025-57739
FO
FortiMail
Fortinet
8.8
0%
Oct 13An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail…
CVE-2026-106170
FO
FortiSandbox
Fortinet
4.9
0%
Oct 13An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow…
CVE-2026-106173
FO
FortiSIEM
Fortinet
9.8
1%
Oct 13A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or…
CVE-2026-106176
FO
FortiSIEM
Fortinet
3.8
0%
Oct 13A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests
CVE-2026-106171
FO
FortiManager
Fortinet
6.1
1%
Oct 13A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6,…
CVE-2026-104286
In wildKEV
FO
FortiMail
Fortinet
9.8
5%
Oct 1Fortinet FortiMail Path Traversal Vulnerability
CVE-2026-84388
FC
FortiPAM Chrome Extension
Fortinet
9.6
0%
Sep 22A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow…
CVE-2026-84390
FO
FortiMonitorOnSight
Fortinet
9.8
1%
Sep 11A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 may allow attacker…
CVE-2026-84392
FO
FortiOS
Fortinet
2.7
1%
Sep 8A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions,…
CVE-2026-22575
FO
FortiManager
Fortinet
4.9
0%
Sep 8An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiManager Cloud 7.6.2…
CVE-2026-84391
FO
FortiAnalyzer
Fortinet
6.5
0%
Sep 8A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector here>
CVE-2026-84393
FO
FortiOS
Fortinet
8.1
0%
Sep 8A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information…
CVE-2026-26084
FC
FortiSandbox Cloud
Fortinet
9.9
0%
Sep 8A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS…
CVE-2026-84385
FP
FortiSOAR PaaS
Fortinet
5.4
0%
Sep 8A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, FortiSOAR PaaS 7.3 all…
CVE-2026-84389
FO
FortiSIEM
Fortinet
3.1
0%
Sep 8A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker to execute…
CVE-2026-84387
FO
FortiSandbox
Fortinet
7.2
1%
Sep 8A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox…
CVE-2026-84386
FO
FortiClientWindows
Fortinet
5.1
0%
Sep 8A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via…
CVE-2026-70468
FO
FortiManager
Fortinet
8.1
0%
Aug 12A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9,…
CVE-2026-26035
FO
FortiWeb
Fortinet
9.8
1%
Aug 12An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb…
CVE-2026-70466
FO
FortiOS
Fortinet
5.3
0%
Aug 12A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions,…
CVE-2026-71407
FO
FortiOS
Fortinet
8.1
1%
Aug 12A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection…
CVE-2026-70467
FO
FortiSIEM
Fortinet
3.8
0%
Aug 12A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM…
CVE-2026-71408
FO
FortiOS
Fortinet
5.3
0%
Aug 12A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker…
CVE-2026-70465
FO
FortiClientWindows
Fortinet
8.1
1%
Aug 12A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11…
CVE-2026-59838
FO
FortiSIEM
Fortinet
4.8
0%
Jul 15A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through…
CVE-2026-59840
FO
FortiOS
Fortinet
4.3
0%
Jul 14A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…
CVE-2025-43892
FO
FortiOS
Fortinet
4.3
0%
Jul 14A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions…
CVE-2026-23573
FO
FortiOS
Fortinet
6.1
0%
Jul 14An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4…
CVE-2026-59839
FO
FortiOS
Fortinet
5.5
0%
Jul 14A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2…
CVE-2025-62826
FO
FortiOS
Fortinet
4.3
0%
Jul 14An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4…
CVE-2025-62675
FO
FortiOS
Fortinet
4.3
0%
Jul 14An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4…
CVE-2026-59836
FO
FortiClientEMS
Fortinet
9.8
0%
Jul 14A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow…
CVE-2026-59841
FO
FortiSIEMWindowsAgent
Fortinet
7.5
0%
Jul 14A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of…
CVE-2025-53379
FO
FortiAuthenticator
Fortinet
7.5
1%
Jul 14A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve…
CVE-2026-59835
FO
FortiSandbox
Fortinet
8.6
0%
Jul 14A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access…
CVE-2026-59837
FO
FortiOS
Fortinet
6.6
1%
Jul 14A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM…
CVE-2025-67862
FO
FortiOS
Fortinet
6.7
0%
Jun 9An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7,…
CVE-2026-25089
In wildKEV
FC
FortiSandbox Cloud
Fortinet
9.8
76%
Jun 9Fortinet FortiSandbox OS Command Injection Vulnerability
CVE-2026-49938
FO
FortiPortal
Fortinet
6.5
0%
Jun 9A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper…
CVE-2025-53870
FO
FortiAP-W2
Fortinet
6.7
1%
May 12An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5,…
CVE-2025-53680
FO
FortiAP
Fortinet
6.7
1%
May 12An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP…
CVE-2025-67604
FO
FortiManager
Fortinet
5.3
0%
May 12A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions,…
CVE-2025-53681
FO
FortiMail
Fortinet
7.2
0%
May 12An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail…
CVE-2026-25690
FO
FortiDeceptor
Fortinet
6.5
0%
May 12An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0 through…
CVE-2025-53844
FO
FortiOS
Fortinet
8.8
1%
May 12A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code…
CVE-2026-44279
FO
FortiTokenAndroid
Fortinet
5.5
0%
May 12An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all…
CVE-2026-44278
FO
FortiClientWindows
Fortinet
5.5
0%
May 12A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information…
CVE-2026-25088
FO
FortiNDR
Fortinet
8.8
0%
May 12An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9,…
CVE-2026-44277
FO
FortiAuthenticator
Fortinet
9.8
1%
May 12A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.0 through…
CVE-2026-26083
FC
FortiSandbox Cloud
Fortinet
9.8
1%
May 12A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSandbox PaaS…
CVE-2026-40688
FO
Fortiweb
Fortinet
7.2
6%
Apr 14An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11 may allow a…
CVE-2026-39815
FO
Fortiddos-f
Fortinet
8.8
0%
Apr 14A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may allow attacker to execute…