Fortimanagercloud (Fortinet) - vulnerabilities (CVEs)
17 CVEs, 2 in the last 30 days, 51 known versions, newest CVE from 2026-10-13. Vendor: Fortinet.
CVEs of Fortimanagercloud
- CVE-2026-23707 - CVSS 7.2 (high), 2026-10-13: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
- CVE-2026-106171 - CVSS 6.1 (medium), 2026-10-13: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0…
- CVE-2026-22575 - CVSS 4.9 (medium), 2026-09-08: An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions,…
- CVE-2026-70468 - CVSS 8.1 (high), 2026-08-12: A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…
- CVE-2026-22828 - CVSS 8.1 (high), 2026-04-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a remote…
- CVE-2025-68649 - CVSS 6.5 (medium), 2026-04-14: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
- CVE-2025-61848 - CVSS 7.2 (high), 2026-04-14: An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
- CVE-2026-22629 - CVSS 3.7 (low), 2026-03-10: An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions,…
- CVE-2025-68648 - CVSS 7.2 (high), 2026-03-10: A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2…
- CVE-2025-68482 - CVSS 6.9 (medium), 2026-03-10: A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all…
- CVE-2025-48418 - CVSS 7.2 (high), 2026-03-10: A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10,…
- CVE-2024-50571 - CVSS 7.2 (high), 2025-10-14: A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through…
- CVE-2024-47569 - CVSS 4.3 (medium), 2025-10-14: A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…
- CVE-2024-50566 - CVSS 8.8 (high), 2025-01-14: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1,…
- CVE-2024-48884 - CVSS 9.1 (critical), 2025-01-14: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager…
- CVE-2024-35276 - CVSS 9.8 (critical), 2025-01-14: A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through…
- CVE-2024-33503 - CVSS 7.8 (high), 2025-01-14: A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud…
