Read the docs

Fortinet

Records1171All Threatist records
Exploited (KEV)32In CISA KEV
CVSS critical136CVSS 9.0–10.0
CVSS high431CVSS 7.0–8.9

Exploited now

Fortinet records in CISA KEV
TI-2025-38067 Fortinet Multiple Products Path Traversal Vulnerability Priority CRITICAL 88KEV 2026-10-16TI-2026-65779 Fortinet FortiMail Path Traversal Vulnerability Priority CRITICAL 100KEV 2026-10-01TI-2025-18911 Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Priority CRITICAL 100KEV 2026-09-09TI-2025-42166 Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Priority HIGH 81KEV 2026-07-27TI-2026-20264 Fortinet FortiSandbox OS Command Injection Vulnerability Priority CRITICAL 98KEV 2026-07-16TI-2026-28691 Fortinet FortiSandbox OS Command Injection Vulnerability Priority CRITICAL 98KEV 2026-07-16

Components

Products in the NVD configurations · select one to filter the records
Fortios 277 records CRITICAL Fortiweb 126 records CRITICAL Fortiproxy 125 records CRITICAL Fortimanager 113 records CRITICAL Fortianalyzer 92 records CRITICAL Forticlient 86 records MEDIUM Fortisandbox 60 records CRITICAL Fortimail 47 records CRITICAL

Records

11 records in Fortindr · all components

TI-2025-23811 CVE-2025-32756 · GHSA-fcpx-h44g-vx2x

Stack-based buffer overflow in Fortinet FortiNDR

Priority CRITICAL 100KEV

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.30944 Published 2025-05-13 No fix listed CWE-121
TI-2023-26619 CVE-2023-48790 · GHSA-fcjw-j93v-hxxq

Cross-site request forgery in Fortinet FortiNDR

Priority MEDIUM 40

A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow a remote unauthenticated attacker to execute unauthorized ac…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0024 Published 2025-03-11 No fix listed CWE-352
TI-2022-10503 CVE-2022-27488 · GHSA-qvxv-pfwq-9h5h

Cross-site request forgery in Fortinet FortiVoice

Priority LOW 39

A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version 7.0.0 through 7.0.3,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00491 Published 2023-12-13 No fix listed CWE-352
TI-2026-20263 CVE-2026-25088 · GHSA-p3gf-69rv-54rw

SQL injection in Fortinet FortiNDR

Priority LOW 38

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through 7.4.9, FortiNDR 7.2 all versions, FortiNDR 7.1 all ve…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00264 Published 2026-05-12 No fix listed CWE-89
TI-2023-16461 CVE-2023-33302 · GHSA-3rq3-6pw2-f97f

Buffer overflow in Fortinet FortiNDR

Priority LOW 38

A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4 and before 6.2.6 and FortiNDR administrative interface versi…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00379 Published 2025-03-31 No fix listed CWE-120
TI-2021-18961 CVE-2021-42757 · GHSA-8xwq-gmgr-vq48

Buffer overflow in Fortinet FortiOS

Priority LOW 30

A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command…

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00516 Published 2021-12-08 No fix listed CWE-120
TI-2024-31857 CVE-2024-47573 · GHSA-v2mv-99jp-98vc

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR…

Priority LOW 26

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker w…

CVSS 3.1MEDIUM 6.0 Network High privileges No interaction EPSS 0.00218 Published 2025-03-14 No fix listed CWE-354
TI-2024-15225 CVE-2024-23104 · GHSA-7w2c-xvm6-78cm

Information disclosure in Fortinet FortiVoice

Priority LOW 24

An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all versions, FortiNDR 7.1 all versions, FortiNDR 7.0 all versions, Forti…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00255 Published 2026-04-14 No fix listed CWE-200
TI-2024-31853 CVE-2024-47569 · GHSA-xh2m-hvr8-55pq

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail…

Priority LOW 20

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00484 Published 2025-10-14 No fix listed CWE-201
TI-2024-27014 CVE-2024-40588 · GHSA-hxwc-32r9-7287

Path traversal in Fortinet FortiCamera

Priority LOW 19

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions, FortiMail 7.6.0 through 7.6…

CVSS 3.1MEDIUM 4.2 Local High privileges No interaction EPSS 0.00184 Published 2025-08-12 No fix listed CWE-23
Open these records in search →