Fortisase (Fortinet) - vulnerabilities (CVEs)
13 CVEs, 1 in the last 30 days, 50 known versions, newest CVE from 2026-10-13. Vendor: Fortinet.
CVEs of Fortisase
- CVE-2026-106175 - CVSS 2.3 (low), 2026-10-13: A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy…
- CVE-2026-59837 - CVSS 6.6 (medium), 2026-07-14: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all…
- CVE-2025-25249 - CVSS 9.8 (critical), 2026-01-13: A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…
- CVE-2024-47570 - CVSS 6.6 (medium), 2025-12-09: An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy…
- CVE-2025-58413 - CVSS 7.5 (high), 2025-11-18: A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all…
- CVE-2025-47890 - CVSS 6.1 (medium), 2025-10-14: An URL Redirection to Untrusted Site vulnerabilities [CWE-601] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2…
- CVE-2025-31366 - CVSS 6.1 (medium), 2025-10-14: An Improper Neutralization of Input During Web Page Generation vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0…
- CVE-2024-47569 - CVSS 4.3 (medium), 2025-10-14: A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…
- CVE-2024-55599 - CVSS 5.3 (medium), 2025-07-08: An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all…
- CVE-2025-24471 - CVSS 6.5 (medium), 2025-06-10: An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user…
- CVE-2025-25250 - CVSS 4.3 (medium), 2025-06-10: An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7,…
- CVE-2024-50562 - CVSS 4.8 (medium), 2025-06-10: An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all…
- CVE-2023-42789 - CVSS 9.8 (critical), 2024-03-12: A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4.0 through…
