NULL pointer dereference in Fortinet FortiOS
Key facts
- Attack vector
- Network
- Privileges required
- High
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · Low
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-476.
Summary
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Fortinet | FortiOS | 7.4.0 – 7.4.13; 7.2.0 – 7.2.14; 7.0.0 – 7.0.19; 6.4.0 – 6.4.16 | — | No fix listed | CNA |
| Fortinet | FortiProxy | 7.6.0 – 7.6.6; 7.4.0 – 7.4.14; 7.2.0 – 7.2.16 | — | No fix listed | CNA |
| Fortinet | FortiPAM | 1.9.0; 1.8.0 – 1.8.4; 1.7.0 – 1.7.2; 1.6.0 – 1.6.2; 1.5.0 – 1.5.1; 1.4.0 – 1.4.3; 1.3.0 – 1.3.1; 1.2.0; 1.1.0 – 1.1.2; 1.0.0 – 1.0.3 | — | No fix listed | CNA |
- FortiOS VendorFortinet Affected 7.4.0 – 7.4.13; 7.2.0 – 7.2.14; 7.0.0 – 7.0.19; 6.4.0 – 6.4.16 Fixed in — No fix listed CNA
- FortiProxy VendorFortinet Affected 7.6.0 – 7.6.6; 7.4.0 – 7.4.14; 7.2.0 – 7.2.16 Fixed in — No fix listed CNA
- FortiPAM VendorFortinet Affected 1.9.0; 1.8.0 – 1.8.4; 1.7.0 – 1.7.2; 1.6.0 – 1.6.2; 1.5.0 – 1.5.1; 1.4.0 – 1.4.3; 1.3.0 – 1.3.1; 1.2.0; 1.1.0 – 1.1.2; 1.0.0 – 1.0.3 Fixed in — No fix listed CNA
CPE names CNA · 133
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:* | 7.4.13 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:* | 7.4.12 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:* | 7.4.11 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:* | 7.4.10 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:* | 7.4.9 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:* | 7.4.8 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:* | 7.4.7 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:* | 7.4.6 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:* | 7.4.5 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:* | 7.4.4 | — | Fortinet |
- cpe:2.3:o:fortinet:fortios:7.4.13:*:*:*:*:*:*:* Versions 7.4.13 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.12:*:*:*:*:*:*:* Versions 7.4.12 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.11:*:*:*:*:*:*:* Versions 7.4.11 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.10:*:*:*:*:*:*:* Versions 7.4.10 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.9:*:*:*:*:*:*:* Versions 7.4.9 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:* Versions 7.4.8 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.7:*:*:*:*:*:*:* Versions 7.4.7 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:* Versions 7.4.6 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:* Versions 7.4.5 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:* Versions 7.4.4 — ·Fortinet
Show 123 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:* | 7.4.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:* | 7.4.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:* | 7.4.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:* | 7.4.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:* | 7.2.14 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:* | 7.2.13 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:* | 7.2.12 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:* | 7.2.11 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:* | 7.2.10 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:* | 7.2.9 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:* | 7.2.8 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:* | 7.2.7 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:* | 7.2.6 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:* | 7.2.5 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:* | 7.2.4 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:* | 7.2.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:* | 7.2.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:* | 7.2.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:* | 7.2.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:* | 7.0.19 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:* | 7.0.18 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:* | 7.0.17 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:* | 7.0.16 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:* | 7.0.15 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:* | 7.0.14 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:* | 7.0.13 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:* | 7.0.12 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:* | 7.0.11 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:* | 7.0.10 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:* | 7.0.9 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:* | 7.0.8 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:* | 7.0.7 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:* | 7.0.6 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:* | 7.0.5 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:* | 7.0.4 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:* | 7.0.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* | 7.0.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* | 7.0.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* | 7.0.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:* | 6.4.16 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:* | 6.4.15 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:* | 6.4.14 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:* | 6.4.13 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:* | 6.4.12 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:* | 6.4.11 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:* | 6.4.10 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:* | 6.4.9 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:* | 6.4.8 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* | 6.4.7 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* | 6.4.6 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* | 6.4.5 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* | 6.4.4 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* | 6.4.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* | 6.4.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* | 6.4.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* | 6.4.0 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.6:*:*:*:*:*:*:* | 7.6.6 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:* | 7.6.5 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:* | 7.6.4 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:* | 7.6.3 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:* | 7.6.2 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:* | 7.6.1 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:* | 7.6.0 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:* | 7.4.14 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:* | 7.4.13 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:* | 7.4.12 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:* | 7.4.11 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:* | 7.4.10 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:* | 7.4.9 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:* | 7.4.8 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:* | 7.4.7 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:* | 7.4.6 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:* | 7.4.5 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:* | 7.4.4 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:* | 7.4.3 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:* | 7.4.2 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:* | 7.4.1 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:* | 7.4.0 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:* | 7.2.16 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:* | 7.2.15 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:* | 7.2.14 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:* | 7.2.13 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:* | 7.2.12 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:* | 7.2.11 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:* | 7.2.10 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:* | 7.2.9 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:* | 7.2.8 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:* | 7.2.7 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:* | 7.2.6 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:* | 7.2.5 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:* | 7.2.4 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:* | 7.2.3 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:* | 7.2.2 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:* | 7.2.1 | — | Fortinet |
| cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:* | 7.2.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.9.0:*:*:*:*:*:*:* | 1.9.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.8.4:*:*:*:*:*:*:* | 1.8.4 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.8.3:*:*:*:*:*:*:* | 1.8.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.8.2:*:*:*:*:*:*:* | 1.8.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.8.1:*:*:*:*:*:*:* | 1.8.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:* | 1.8.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:* | 1.7.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:* | 1.7.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:* | 1.7.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:* | 1.6.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:* | 1.6.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:* | 1.6.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:* | 1.5.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:* | 1.5.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:* | 1.4.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:* | 1.4.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:* | 1.4.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:* | 1.4.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:* | 1.3.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:* | 1.3.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:* | 1.2.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:* | 1.1.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:* | 1.1.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:* | 1.1.0 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:* | 1.0.3 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:* | 1.0.2 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:* | 1.0.1 | — | Fortinet |
| cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:* | 1.0.0 | — | Fortinet |
- cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:* Versions 7.4.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:* Versions 7.4.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:* Versions 7.4.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.14:*:*:*:*:*:*:* Versions 7.2.14 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:* Versions 7.2.13 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:* Versions 7.2.12 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:* Versions 7.2.11 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.10:*:*:*:*:*:*:* Versions 7.2.10 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.9:*:*:*:*:*:*:* Versions 7.2.9 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.8:*:*:*:*:*:*:* Versions 7.2.8 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.7:*:*:*:*:*:*:* Versions 7.2.7 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.6:*:*:*:*:*:*:* Versions 7.2.6 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.5:*:*:*:*:*:*:* Versions 7.2.5 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.4:*:*:*:*:*:*:* Versions 7.2.4 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:* Versions 7.2.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.19:*:*:*:*:*:*:* Versions 7.0.19 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.18:*:*:*:*:*:*:* Versions 7.0.18 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.17:*:*:*:*:*:*:* Versions 7.0.17 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.16:*:*:*:*:*:*:* Versions 7.0.16 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.15:*:*:*:*:*:*:* Versions 7.0.15 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.14:*:*:*:*:*:*:* Versions 7.0.14 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.13:*:*:*:*:*:*:* Versions 7.0.13 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.12:*:*:*:*:*:*:* Versions 7.0.12 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.11:*:*:*:*:*:*:* Versions 7.0.11 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.10:*:*:*:*:*:*:* Versions 7.0.10 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:* Versions 7.0.9 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:* Versions 7.0.8 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:* Versions 7.0.7 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:* Versions 7.0.6 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:* Versions 7.0.5 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:* Versions 7.0.4 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:* Versions 7.0.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* Versions 7.0.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* Versions 7.0.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.16:*:*:*:*:*:*:* Versions 6.4.16 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.15:*:*:*:*:*:*:* Versions 6.4.15 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.14:*:*:*:*:*:*:* Versions 6.4.14 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.13:*:*:*:*:*:*:* Versions 6.4.13 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.12:*:*:*:*:*:*:* Versions 6.4.12 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:* Versions 6.4.11 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:* Versions 6.4.10 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:* Versions 6.4.9 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:* Versions 6.4.8 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* Versions 6.4.7 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* Versions 6.4.6 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* Versions 6.4.5 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* Versions 6.4.4 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* Versions 6.4.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* Versions 6.4.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* Versions 6.4.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* Versions 6.4.0 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.6:*:*:*:*:*:*:* Versions 7.6.6 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.5:*:*:*:*:*:*:* Versions 7.6.5 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.4:*:*:*:*:*:*:* Versions 7.6.4 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.3:*:*:*:*:*:*:* Versions 7.6.3 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.2:*:*:*:*:*:*:* Versions 7.6.2 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.1:*:*:*:*:*:*:* Versions 7.6.1 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.6.0:*:*:*:*:*:*:* Versions 7.6.0 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.14:*:*:*:*:*:*:* Versions 7.4.14 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.13:*:*:*:*:*:*:* Versions 7.4.13 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.12:*:*:*:*:*:*:* Versions 7.4.12 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.11:*:*:*:*:*:*:* Versions 7.4.11 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.10:*:*:*:*:*:*:* Versions 7.4.10 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.9:*:*:*:*:*:*:* Versions 7.4.9 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.8:*:*:*:*:*:*:* Versions 7.4.8 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.7:*:*:*:*:*:*:* Versions 7.4.7 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.6:*:*:*:*:*:*:* Versions 7.4.6 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.5:*:*:*:*:*:*:* Versions 7.4.5 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.4:*:*:*:*:*:*:* Versions 7.4.4 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.3:*:*:*:*:*:*:* Versions 7.4.3 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.2:*:*:*:*:*:*:* Versions 7.4.2 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.1:*:*:*:*:*:*:* Versions 7.4.1 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.16:*:*:*:*:*:*:* Versions 7.2.16 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.15:*:*:*:*:*:*:* Versions 7.2.15 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.14:*:*:*:*:*:*:* Versions 7.2.14 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.13:*:*:*:*:*:*:* Versions 7.2.13 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.12:*:*:*:*:*:*:* Versions 7.2.12 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.11:*:*:*:*:*:*:* Versions 7.2.11 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.10:*:*:*:*:*:*:* Versions 7.2.10 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.9:*:*:*:*:*:*:* Versions 7.2.9 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.8:*:*:*:*:*:*:* Versions 7.2.8 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.7:*:*:*:*:*:*:* Versions 7.2.7 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.6:*:*:*:*:*:*:* Versions 7.2.6 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.5:*:*:*:*:*:*:* Versions 7.2.5 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.4:*:*:*:*:*:*:* Versions 7.2.4 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.3:*:*:*:*:*:*:* Versions 7.2.3 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.2:*:*:*:*:*:*:* Versions 7.2.2 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.1:*:*:*:*:*:*:* Versions 7.2.1 — ·Fortinet
- cpe:2.3:a:fortinet:fortiproxy:7.2.0:*:*:*:*:*:*:* Versions 7.2.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.9.0:*:*:*:*:*:*:* Versions 1.9.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.8.4:*:*:*:*:*:*:* Versions 1.8.4 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.8.3:*:*:*:*:*:*:* Versions 1.8.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.8.2:*:*:*:*:*:*:* Versions 1.8.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.8.1:*:*:*:*:*:*:* Versions 1.8.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.8.0:*:*:*:*:*:*:* Versions 1.8.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.7.2:*:*:*:*:*:*:* Versions 1.7.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.7.1:*:*:*:*:*:*:* Versions 1.7.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.7.0:*:*:*:*:*:*:* Versions 1.7.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.6.2:*:*:*:*:*:*:* Versions 1.6.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.6.1:*:*:*:*:*:*:* Versions 1.6.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.6.0:*:*:*:*:*:*:* Versions 1.6.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.5.1:*:*:*:*:*:*:* Versions 1.5.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:* Versions 1.5.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.4.3:*:*:*:*:*:*:* Versions 1.4.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.4.0:*:*:*:*:*:*:* Versions 1.4.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.3.1:*:*:*:*:*:*:* Versions 1.3.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:* Versions 1.2.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.1.2:*:*:*:*:*:*:* Versions 1.1.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.1.1:*:*:*:*:*:*:* Versions 1.1.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.1.0:*:*:*:*:*:*:* Versions 1.1.0 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.0.3:*:*:*:*:*:*:* Versions 1.0.3 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.0.2:*:*:*:*:*:*:* Versions 1.0.2 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.0.1:*:*:*:*:*:*:* Versions 1.0.1 — ·Fortinet
- cpe:2.3:o:fortinet:fortipam:1.0.0:*:*:*:*:*:*:* Versions 1.0.0 — ·Fortinet
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-84392
- 2026-10-03 Alias added: GHSA-ww3q-4pw6-jh9g
- 2026-10-16 EPSS moved to the 50th–90th percentile
- 2026-10-29 Title updated · CNA
- 2026-10-29 Affected versions changed · CNA
References
More Fortinet vulnerabilities
- TI-2026-65779 Path traversal in Fortinet FortiMail KEVCVSS 3.1CRITICAL 9.8
- TI-2026-20057 Authentication bypass in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-39856 Path traversal in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.4
- TI-2025-23811 Stack-based buffer overflow in Fortinet FortiNDR KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18919 SQL injection in Fortinet FortiWeb KEVCVSS 3.1CRITICAL 9.8
- TI-2025-18911 Heap-based buffer overflow in Fortinet FortiSwitchManager KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2026-84392 · CVE Program
- CVE-2026-84392 · NVD
- FIRST EPSS
- GHSA-ww3q-4pw6-jh9g · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences