Priority LOW 19
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiPr…
CVSS 3.1MEDIUM 4.1· Network · Low privileges · No interaction · EPSS 0.00313 · Published 2026-07-14 · No fix listed CWE-126
Priority LOW 19
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attack…
CVSS 3.1MEDIUM 4.1· Network · Low privileges · No interaction · EPSS 0.00381 · Published 2026-07-14 · No fix listed CWE-126
Priority LOW 27
An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, Fo…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00385 · Published 2026-07-14 · No fix listed CWE-79
Priority LOW 22
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, For…
CVSS 3.1MEDIUM 5.0· Physical · High privileges · No interaction · EPSS 0.00251 · Published 2026-07-14 · No fix listed CWE-22
Priority LOW 20
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions,…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00372 · Published 2026-07-14 · No fix listed CWE-113
Priority LOW 20
An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions,…
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00271 · Published 2026-07-14 · No fix listed CWE-113
Priority LOW 30
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…
CVSS 3.1MEDIUM 5.9· Network · High privileges · No interaction · EPSS 0.0067 · Published 2026-07-14 · No fix listed CWE-121
Priority LOW 28
An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 thr…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00149 · Published 2026-06-09 · No fix listed CWE-1244
Priority CRITICAL 88KEV
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all ver…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.01343 · Published 2026-04-14 · No fix listed CWE-22
Priority CRITICAL 100KEV
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, Fort…
CVSS 3.1CRITICAL 9.4· Network · No auth · No interaction · EPSS 0.86592 · Published 2026-01-27 · No fix listed CWE-288
Priority LOW 31
An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all ve…
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00405 · Published 2025-12-09 · No fix listed CWE-532
Priority CRITICAL 98KEV
A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through…
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.68293 · Published 2025-12-09 · No fix listed CWE-347
Priority LOW 26
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…
CVSS 3.1MEDIUM 6.0· Local · High privileges · No interaction · EPSS 0.00185 · Published 2025-11-18 · No fix listed CWE-269
Priority LOW 20
A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00361 · Published 2025-10-14 · No fix listed CWE-532
Priority LOW 20
An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versi…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00327 · Published 2025-10-14 · No fix listed CWE-285
Priority LOW 22
An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all ver…
CVSS 3.1MEDIUM 4.8· Network · No auth · No interaction · EPSS 0.00437 · Published 2025-10-14 · No fix listed CWE-358
Priority LOW 30
An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and…
CVSS 3.1MEDIUM 5.0· Network · No auth · No interaction · EPSS 0.00576 · Published 2025-10-14 · No fix listed CWE-754
Priority LOW 20
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1…
CVSS 3.1MEDIUM 4.2· Network · Low privileges · No interaction · EPSS 0.00484 · Published 2025-10-14 · No fix listed CWE-201
Priority LOW 35
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker t…
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00188 · Published 2025-10-14 · No fix listed CWE-121
Priority LOW 32
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all ve…
CVSS 3.1MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00536 · Published 2025-10-14 · No fix listed CWE-122
Priority LOW 27
An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00401 · Published 2025-10-14 · No fix listed CWE-79
Priority LOW 34
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4…
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00556 · Published 2025-10-14 · No fix listed CWE-122
Priority LOW 31
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, ver…
CVSS 3.1MEDIUM 6.8· Adjacent network · No auth · No interaction · EPSS 0.00114 · Published 2025-10-14 · No fix listed CWE-297
Priority MEDIUM 41
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and b…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00697 · Published 2025-10-14 · No fix listed CWE-122
Priority LOW 27
An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versi…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00254 · Published 2025-10-14 · No fix listed CWE-601
Load more