Fortinac-f (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-04-14. Vendor: Fortinet.
CVEs of Fortinac-f
- CVE-2026-21741 - CVSS 4.8 (medium), 2026-04-14: An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7.4 all…
- CVE-2026-24858 - CVSS 9.8 (critical), 2026-01-27: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer…
- CVE-2023-48785 - CVSS 4.8 (medium), 2025-03-14: An improper certificate validation vulnerability [CWE-295] in FortiNAC-F version 7.2.4 and below may allow a remote and unauthenticated attacker to perform a…
- CVE-2023-22633 - CVSS 7.5 (high), 2023-06-13: An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and…
- CVE-2023-26203 - CVSS 7.8 (high), 2023-05-03: A use of hard-coded credentials vulnerability [CWE-798] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8…
- CVE-2023-22637 - CVSS 9 (critical), 2023-05-03: An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiNAC-F version 7.2.0, FortiNAC version…
- CVE-2022-45859 - CVSS 4.4 (medium), 2023-05-03: An insufficiently protected credentials vulnerability [CWE-522] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all…
- CVE-2022-45860 - CVSS 7.5 (high), 2023-05-03: A weak authentication vulnerability [CWE-1390] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all…
- CVE-2022-43950 - CVSS 4.7 (medium), 2023-05-03: A URL redirection to untrusted site ('Open Redirect') vulnerability [CWE-601] in FortiNAC-F version 7.2.0, FortiNAC version 9.4.1 and below, 9.2 all versions,…
- CVE-2022-43951 - CVSS 7.5 (high), 2023-04-11: An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.11…
- CVE-2022-40675 - CVSS 7.4 (high), 2023-02-16: Some cryptographic issues in Fortinet FortiNAC versions 9.4.0 through 9.4.1, 9.2.0 through 9.2.7, 9.1.0 through 9.1.8, 8.8.0 through 8.8.11, 8.7.0 through…
- CVE-2022-39954 - CVSS 9.1 (critical), 2023-02-16: An improper restriction of xml external entity reference in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.7, FortiNAC…
- CVE-2022-38375 - CVSS 9.8 (critical), 2023-02-16: An improper authorization vulnerability [CWE-285] in Fortinet FortiNAC version 9.4.0 through 9.4.1 and before 9.2.6 allows an unauthenticated user to perform…
