Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

125 records

Priority LOW 19

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiPr…

CVSS 3.1MEDIUM 4.1 Network Low privileges No interaction EPSS 0.00313 Published 2026-07-14 No fix listed CWE-126
Priority LOW 19

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attack…

CVSS 3.1MEDIUM 4.1 Network Low privileges No interaction EPSS 0.00381 Published 2026-07-14 No fix listed CWE-126
TI-2026-18994 CVE-2026-23573 · GHSA-7r2p-wwg4-j6v8

Cross-site scripting in Fortinet FortiOS

Priority LOW 27

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, Fo…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00385 Published 2026-07-14 No fix listed CWE-79
TI-2026-42655 CVE-2026-59839 · GHSA-c97x-2x9j-68c3

Path traversal in Fortinet FortiProxy

Priority LOW 22

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, For…

CVSS 3.1MEDIUM 5.0 Physical High privileges No interaction EPSS 0.00251 Published 2026-07-14 No fix listed CWE-22
TI-2025-38993 CVE-2025-62826 · GHSA-xm2q-h8v9-r8j8

HTTP response splitting in Fortinet FortiPAM

Priority LOW 20

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions,…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00372 Published 2026-07-14 No fix listed CWE-113
TI-2025-38876 CVE-2025-62675 · GHSA-cm5j-986p-jqrj

HTTP response splitting in Fortinet FortiOS

Priority LOW 20

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions,…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00271 Published 2026-07-14 No fix listed CWE-113
Priority LOW 30

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…

CVSS 3.1MEDIUM 5.9 Network High privileges No interaction EPSS 0.0067 Published 2026-07-14 No fix listed CWE-121
Priority LOW 28

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 thr…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00149 Published 2026-06-09 No fix listed CWE-1244
Priority CRITICAL 88KEV

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all ver…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.01343 Published 2026-04-14 No fix listed CWE-22
TI-2026-20057 CVE-2026-24858 · GHSA-2x38-48vp-w23x

Authentication bypass in Fortinet FortiWeb

Priority CRITICAL 100KEV

An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, Fort…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.86592 Published 2026-01-27 No fix listed CWE-288
Priority LOW 31

An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through 7.2.11; FortiPAM 1.4 all ve…

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00405 Published 2025-12-09 No fix listed CWE-532
Priority CRITICAL 98KEV

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through…

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.68293 Published 2025-12-09 No fix listed CWE-347
Priority LOW 26

An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…

CVSS 3.1MEDIUM 6.0 Local High privileges No interaction EPSS 0.00185 Published 2025-11-18 No fix listed CWE-269
Priority LOW 20

A insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00361 Published 2025-10-14 No fix listed CWE-532
Priority LOW 20

An improper authorization vulnerability [CWE-285] vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.8, FortiOS 7.0.0 through 7.0.11, FortiProxy 7.4.0 through 7.4.8, FortiProxy 7.2 all versi…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00327 Published 2025-10-14 No fix listed CWE-285
Priority LOW 22

An Improperly Implemented Security Check for Standard vulnerability [CWE-358] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all ver…

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00437 Published 2025-10-14 No fix listed CWE-358
Priority LOW 30

An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version 7.4.0 through 7.4.3 and before 7.2.9, FortiPAM before 1.2.0 and…

CVSS 3.1MEDIUM 5.0 Network No auth No interaction EPSS 0.00576 Published 2025-10-14 No fix listed CWE-754
Priority LOW 20

A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1…

CVSS 3.1MEDIUM 4.2 Network Low privileges No interaction EPSS 0.00484 Published 2025-10-14 No fix listed CWE-201
Priority LOW 35

A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0.0 through 7.0.12 and 6.4.6 through 6.4.15 and 6.2.9 through 6.2.16 and 6.0.13 through 6.0.18 allows attacker t…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00188 Published 2025-10-14 No fix listed CWE-121
Priority LOW 32

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all ve…

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00536 Published 2025-10-14 No fix listed CWE-122
TI-2025-22555 CVE-2025-31366 · GHSA-8mjg-h7v2-89h4

Cross-site scripting in Fortinet FortiSASE

Priority LOW 27

An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00401 Published 2025-10-14 No fix listed CWE-79
Priority LOW 34

A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00556 Published 2025-10-14 No fix listed CWE-122
Priority LOW 31

An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions and FortiOS version 7.6.2 and below, ver…

CVSS 3.1MEDIUM 6.8 Adjacent network No auth No interaction EPSS 0.00114 Published 2025-10-14 No fix listed CWE-297
Priority MEDIUM 41

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and b…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00697 Published 2025-10-14 No fix listed CWE-122
TI-2025-30304 CVE-2025-47890 · GHSA-c94q-cx8q-xxv2

Open redirect in Fortinet FortiOS

Priority LOW 27

An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00254 Published 2025-10-14 No fix listed CWE-601
Load more