Fortinet - vulnerabilities (CVEs)

1171 CVEs in 343 products, 14 in the last 30 days, newest from 2026-10-27.

Products

• Fortios - 282 CVEs
• Fortiproxy - 129 CVEs
• Fortiweb - 126 CVEs
• Fortimanager - 113 CVEs
• Fortianalyzer - 93 CVEs
• Forticlient - 85 CVEs
• Fortisandbox - 65 CVEs
• Fortimail - 49 CVEs
• Fortinet Fortios - 47 CVEs
• Fortiportal - 46 CVEs
• Fortiadc - 43 CVEs
• Fortipam - 39 CVEs
• Fortisiem - 35 CVEs
• Fortisoar - 32 CVEs
• Fortinac - 30 CVEs
• Fortimanager Cloud - 28 CVEs
• Fortinet Fortiweb - 27 CVEs
• Fortivoice - 25 CVEs
• Fortiauthenticator - 24 CVEs
• Fortiwlm - 23 CVEs
• Fortiswitchmanager - 21 CVEs
• Forticlientwindows - 20 CVEs
• Forticlientems - 18 CVEs
• Fortianalyzer Cloud - 17 CVEs
• Fortimanagercloud - 17 CVEs
• Fortinet Antivirus - 17 CVEs
• Fortitester - 16 CVEs
• Fortiwan - 16 CVEs
• Fortimanager Firmware - 15 CVEs
• Fortinet Fortimail - 15 CVEs
• Fortianalyzercloud - 14 CVEs
• Fortirecorder - 14 CVEs
• Fortiswitch - 14 CVEs
• Fortianalyzer Big Data - 13 CVEs
• Forticlientmac - 13 CVEs
• Fortinac-f - 13 CVEs
• Fortinet Fortimanager - 13 CVEs
• Fortinet Fortiportal - 13 CVEs
• Fortinet Fortisandbox - 13 CVEs
• Fortisase - 13 CVEs
• Fortisoaron-premise - 13 CVEs
• Fortiwlc - 13 CVEs
• Fortianalyzer Firmware - 12 CVEs
• Fortindr - 12 CVEs
• Fortideceptor - 11 CVEs
• Fortisoarpaas - 11 CVEs
• Fortiisolator - 10 CVEs
• Fortisandboxpaas - 10 CVEs
• Fortinet Fortianalyzer - 9 CVEs
• Fortinet Forticlientwindows - 9 CVEs
• Fortisandbox Cloud - 9 CVEs
• Fortisandboxcloud - 9 CVEs
• Fortiap-w2 - 8 CVEs
• Fortinet Fortiadc - 8 CVEs
• Fortinet Fortitester - 8 CVEs
• Fortinet Fortiwlm - 8 CVEs
• Fortiap - 7 CVEs
• Forticlient Endpoint Management Server - 7 CVEs
• Forticlient Enterprise Management Server - 7 CVEs
• Forticlientlinux - 7 CVEs
• Fortiddos-f - 7 CVEs
• Fortiedr - 7 CVEs
• Fortiextender Firmware - 7 CVEs
• Fortinet Forticlientlinux - 7 CVEs
• Fortiap-u - 6 CVEs
• Fortinet Forticlientems - 6 CVEs
• Fortinet Fortinac - 6 CVEs
• Fortinet Fortisoar - 6 CVEs
• Fortinet Fortiwan - 6 CVEs
• Fcm-mb40 Firmware - 5 CVEs
• Fortiadc Firmware - 5 CVEs
• Fortianalyzer-bigdata - 5 CVEs
• Fortiap-s - 5 CVEs
• Fortiddos - 5 CVEs
• Fortinet Fortiedr - 5 CVEs
• Fortinet Fortiproxy - 5 CVEs
• Fortirecorder Firmware - 5 CVEs
• Fortiweb Manager - 5 CVEs
• Fortiaiops - 4 CVEs
• Fortidlp - 4 CVEs
• Fortidlp Agent - 4 CVEs
• Fortiextender - 4 CVEs
• Fortinet Fortios And Fortiproxy - 4 CVEs
• Fortinet Fortisiem - 4 CVEs
• Fortisra - 4 CVEs
• Fortiwebmanager - 4 CVEs
• Fortibalancer 1000 Firmware - 3 CVEs
• Fortibalancer 2000 Firmware - 3 CVEs
• Fortibalancer 3000 Firmware - 3 CVEs
• Fortibalancer 400 Firmware - 3 CVEs
• Forticlient For Mac Os - 3 CVEs
• Fortinet Fortiauthenticator - 3 CVEs
• Fortinet Forticlient For Windows - 3 CVEs
• Fortinet Forticlientmac - 3 CVEs
• Fortinet Fortideceptor - 3 CVEs
• Fortinet Fortiisolator - 3 CVEs
• Fortinet Fortiwlc - 3 CVEs
• Fortitoken Mobile - 3 CVEs
• Antivirus Engine - 2 CVEs
• Fortiadc-1000e - 2 CVEs
• Fortiadc-1500d - 2 CVEs
• Fortiadc-2000d - 2 CVEs
• Fortiadc-200d - 2 CVEs
• Fortiadc-300e - 2 CVEs
• Fortiadc-4000d - 2 CVEs
• Fortiadc-400e - 2 CVEs
• Fortiadc-600e - 2 CVEs
• Fortiadc Manager - 2 CVEs
• Fortiap-c - 2 CVEs
• Forticamera - 2 CVEs
• Forticamera Firmware - 2 CVEs
• Forticlient Sslvpn Client - 2 CVEs
• Forticlientems Cloud - 2 CVEs
• Forticlientios - 2 CVEs
• Fortiddos-cm - 2 CVEs
• Fortifone - 2 CVEs
• Fortigate - 2 CVEs
• Fortigate-1000c - 2 CVEs
• Fortigate-100d - 2 CVEs
• Fortigate-110c - 2 CVEs
• Fortigate-1240b - 2 CVEs
• Fortigate-200b - 2 CVEs
• Fortigate-20c - 2 CVEs
• Fortigate-300c - 2 CVEs
• Fortigate-3040b - 2 CVEs
• Fortigate-310b - 2 CVEs
• Fortigate-311b - 2 CVEs
• Fortigate-3140b - 2 CVEs
• Fortigate-3240c - 2 CVEs
• Fortigate-3810a - 2 CVEs
• Fortigate-3950b - 2 CVEs
• Fortigate-40c - 2 CVEs
• Fortigate-5001a-sw - 2 CVEs
• Fortigate-5001b - 2 CVEs
• Fortigate-5020 - 2 CVEs
• Fortigate-5060 - 2 CVEs
• Fortigate-50b - 2 CVEs
• Fortigate-5101c - 2 CVEs
• Fortigate-5140b - 2 CVEs
• Fortigate-600c - 2 CVEs
• Fortigate-60c - 2 CVEs
• Fortigate-620b - 2 CVEs
• Fortigate-800c - 2 CVEs
• Fortigate-80c - 2 CVEs
• Fortigate-voice-80c - 2 CVEs
• Fortigaterugged-100c - 2 CVEs
• Fortinet Fortiap - 2 CVEs
• Fortinet Fortiap-u - 2 CVEs
• Fortinet Fortisiemwindowsagent - 2 CVEs
• Fortinet Fortiswitch - 2 CVEs
• Fortinet Fortitokenandroid - 2 CVEs
• Fortios-6k7k - 2 CVEs
• Fortios Ips Engine - 2 CVEs
• Fortipresence - 2 CVEs
• Fortisandbox Paas - 2 CVEs
• Fortiswitchaxfixed - 2 CVEs
• Fortivoiceenterprise - 2 CVEs
• Connect - 1 CVEs
• Coyote Point Equalizer - 1 CVEs
• Coyote Point Equalizer Firmware - 1 CVEs
• Fortiadc-700d - 1 CVEs
• Fortiadcmanager - 1 CVEs
• Fortiai - 1 CVEs
• Fortiai Firmware - 1 CVEs
• Fortianalyzer-1000d - 1 CVEs
• Fortianalyzer-2000b - 1 CVEs
• Fortianalyzer-200d - 1 CVEs
• Fortianalyzer-3000d - 1 CVEs
• Fortianalyzer-300d - 1 CVEs
• Fortianalyzer-4000b - 1 CVEs
• Fortiauthenticator Agent For Microsoft Outlook Web Access - 1 CVEs
• Fortiauthenticator Web Ui - 1 CVEs
• Forticlient Emergency Management Server - 1 CVEs
• Forticlient For Windows - 1 CVEs
• Forticlient Host Security - 1 CVEs
• Forticlient Lite - 1 CVEs
• Forticlient Ssl Vpn - 1 CVEs
• Forticlient Virtual Private Network - 1 CVEs
• Forticlientandroid - 1 CVEs
• Forticonverter - 1 CVEs
• Fortidb - 1 CVEs
• Fortiedrcollectorwindows - 1 CVEs
• Fortiedrmanager - 1 CVEs
• Fortifone Softclient - 1 CVEs
• Fortigate-1000 - 1 CVEs
• Fortigate And Fortiproxy - 1 CVEs
• Fortiguard Antivirus - 1 CVEs
• Fortiguest - 1 CVEs
• Fortimonitoronsight - 1 CVEs
• Fortinet - 1 CVEs
• Fortinet28 - 1 CVEs
• Fortinet Av Engine - 1 CVEs
• Fortinet Connect - 1 CVEs
• Fortinet Firewall - 1 CVEs
• Fortinet Fortiadcmanager - 1 CVEs
• Fortinet Fortiai - 1 CVEs
• Fortinet Fortiap-c - 1 CVEs
• Fortinet Fortiap-sw2 - 1 CVEs
• Fortinet Fortiap-w2 - 1 CVEs
• Fortinet Fortiauthenticator Outlookagent - 1 CVEs
• Fortinet Forticlient - 1 CVEs
• Fortinet Fortiddos - 1 CVEs
• Fortinet Fortigate - 1 CVEs
• Fortinet Fortipresence - 1 CVEs
• Fortinet Fortisdnconnector - 1 CVEs
• Fortinet Fortitokenios - 1 CVEs
• Fortinet Fortitokenwinapp - 1 CVEs
• Fortinet Fortiwebmanager - 1 CVEs
• Fortinet Fsso Windows Dc Agent - 1 CVEs
• Fortinet Meru Ap - 1 CVEs
• Fortinet Single Sign-on - 1 CVEs
• Fortipam Chrome Extension - 1 CVEs
• Fortisandbox Firmware - 1 CVEs
• Fortisdnconnector - 1 CVEs
• Fortisiem Windows Agent - 1 CVEs
• Fortisiemwindowsagent - 1 CVEs
• Fortisoar Agent Communication Bridge - 1 CVEs
• Fortisoar Imap Connector - 1 CVEs
• Fortisoaragentcommunicationbridge - 1 CVEs
• Fortitokenandroid - 1 CVEs
• Fortivoiceucdesktop - 1 CVEs
• Fortiwlc-sd - 1 CVEs
• Fsso Windows Ca - 1 CVEs
• Ips Engine - 1 CVEs
• Meru Firmware - 1 CVEs
• Single Sign On - 1 CVEs
• Fortisandbox Paas - 0 CVEs
• Fcm-mb40 - 0 CVEs
• Fim-7901e - 0 CVEs
• Fim-7904e - 0 CVEs
• Fim-7910e - 0 CVEs
• Fim-7920e - 0 CVEs
• Fim-7921f - 0 CVEs
• Fim-7941f - 0 CVEs
• Fortiai 3500f - 0 CVEs
• Fortibalancer 1000 - 0 CVEs
• Fortibalancer 2000 - 0 CVEs
• Fortibalancer 3000 - 0 CVEs
• Fortibalancer 400 - 0 CVEs
• Fortigate-1000d - 0 CVEs
• Fortigate-1100e - 0 CVEs
• Fortigate-1200d - 0 CVEs
• Fortigate-1500d - 0 CVEs
• Fortigate-200f - 0 CVEs
• Fortigate-2600f - 0 CVEs
• Fortigate-3000d - 0 CVEs
• Fortigate-3500f - 0 CVEs
• Fortigate-3700d - 0 CVEs
• Fortigate-3815d - 0 CVEs
• Fortigate-400e - 0 CVEs
• Fortigate-600e - 0 CVEs
• Fortigate-6300f - 0 CVEs
• Fortigate-6300f-dc - 0 CVEs
• Fortigate-6500f - 0 CVEs
• Fortigate-6500f-dc - 0 CVEs
• Fortigate-6501f - 0 CVEs
• Fortigate-6501f-dc - 0 CVEs
• Fortigate-6601f - 0 CVEs
• Fortigate-6601f-dc - 0 CVEs
• Fortigate-7030e - 0 CVEs
• Fortigate-7040e - 0 CVEs
• Fortigate-7060e - 0 CVEs
• Fortigate-7121f - 0 CVEs
• Fortigate 1000d - 0 CVEs
• Fortigate 100e - 0 CVEs
• Fortigate 100f - 0 CVEs
• Fortigate 1100e - 0 CVEs
• Fortigate 1500d - 0 CVEs
• Fortigate 1800f - 0 CVEs
• Fortigate 2000e - 0 CVEs
• Fortigate 200e - 0 CVEs
• Fortigate 2200e - 0 CVEs
• Fortigate 3000d - 0 CVEs
• Fortigate 300e - 0 CVEs
• Fortigate 301e - 0 CVEs
• Fortigate 3300e - 0 CVEs
• Fortigate 3400e - 0 CVEs
• Fortigate 3600e - 0 CVEs
• Fortigate 3700d - 0 CVEs
• Fortigate 3960e - 0 CVEs
• Fortigate 3980e - 0 CVEs
• Fortigate 400e - 0 CVEs
• Fortigate 40f - 0 CVEs
• Fortigate 4200f - 0 CVEs
• Fortigate 5001d - 0 CVEs
• Fortigate 5001e - 0 CVEs
• Fortigate 5001e1 - 0 CVEs
• Fortigate 5053b - 0 CVEs
• Fortigate 5060 - 0 CVEs
• Fortigate 50e - 0 CVEs
• Fortigate 5144c - 0 CVEs
• Fortigate 6000 - 0 CVEs
• Fortigate 600e - 0 CVEs
• Fortigate 60e - 0 CVEs
• Fortigate 60f - 0 CVEs
• Fortigate 6300f - 0 CVEs
• Fortigate 6500f - 0 CVEs
• Fortigate 7000 - 0 CVEs
• Fortigate 7040e - 0 CVEs
• Fortigate 7060e - 0 CVEs
• Fortigate 7121f - 0 CVEs
• Fortigate 80e - 0 CVEs
• Fortigate 80f - 0 CVEs
• Fortimail-2000b - 0 CVEs
• Fortimail-200d - 0 CVEs
• Fortimail-400c - 0 CVEs
• Fortimail-5002b - 0 CVEs
• Fortimail-vm2000 - 0 CVEs
• Fortimanager 2000e - 0 CVEs
• Fortimanager 200d - 0 CVEs
• Fortimanager 3000f - 0 CVEs
• Fortimanager 300e - 0 CVEs
• Fortimanager 3900e - 0 CVEs
• Fortimanager 400e - 0 CVEs
• Fortinet Forticlient Ems - 0 CVEs
• Fortirecorder 100d - 0 CVEs
• Fortirecorder 200d - 0 CVEs
• Fortirecorder 400d - 0 CVEs
• Fpm-7620e - 0 CVEs
• Fpm-7620f - 0 CVEs
• Fpm-7630e - 0 CVEs
• Fsw-1024d - 0 CVEs
• Fsw-1048d - 0 CVEs
• Fsw-108d-poe - 0 CVEs
• Fsw-124d - 0 CVEs
• Fsw-124d-poe - 0 CVEs
• Fsw-224d-fpoe - 0 CVEs
• Fsw-224d-poe - 0 CVEs
• Fsw-248d-fpoe - 0 CVEs
• Fsw-248d-poe - 0 CVEs
• Fsw-3032d - 0 CVEs
• Fsw-424d - 0 CVEs
• Fsw-424d-fpoe - 0 CVEs
• Fsw-424d-poe - 0 CVEs
• Fsw-448d - 0 CVEs
• Fsw-448d-fpoe - 0 CVEs
• Fsw-448d-poe - 0 CVEs
• Fsw-524d - 0 CVEs
• Fsw-524d-fpoe - 0 CVEs
• Fsw-548d - 0 CVEs
• Fsw-548d-fpoe - 0 CVEs
• Fsw-r-112d-poe - 0 CVEs
• Meru - 0 CVEs

Newest CVEs of Fortinet

• CVE-2026-106174 - CVSS 7.5 (high), 2026-10-27: A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the…
• CVE-2026-107656 - CVSS 9.8 (critical), 2026-10-26: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9,…
• CVE-2026-106175 - CVSS 2.3 (low), 2026-10-13: A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy…
• CVE-2026-106172 - CVSS 5.3 (medium), 2026-10-13: A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all…
• CVE-2025-46773 - CVSS 8.8 (high), 2026-10-13: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
• CVE-2026-23707 - CVSS 7.2 (high), 2026-10-13: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
• CVE-2026-23706 - CVSS 6.5 (medium), 2026-10-13: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
• CVE-2026-23705 - CVSS 7.2 (high), 2026-10-13: An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
• CVE-2025-57739 - CVSS 8.8 (high), 2026-10-13: An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0…
• CVE-2026-106170 - CVSS 4.9 (medium), 2026-10-13: An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4…
• CVE-2026-106173 - CVSS 9.8 (critical), 2026-10-13: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute…
• CVE-2026-106176 - CVSS 3.8 (low), 2026-10-13: A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP…
• CVE-2026-106171 - CVSS 6.1 (medium), 2026-10-13: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0…
• CVE-2026-104286 - CVSS 9.8 (critical), 2026-10-01: An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0…
• CVE-2026-84388 - CVSS 9.6 (critical), 2026-09-22: A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all…
• CVE-2026-84390 - CVSS 9.8 (critical), 2026-09-11: A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2…
• CVE-2026-84392 - CVSS 2.7 (low), 2026-09-08: A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8…
• CVE-2026-22575 - CVSS 4.9 (medium), 2026-09-08: An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions,…
• CVE-2026-84391 - CVSS 6.5 (medium), 2026-09-08: A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector…
• CVE-2026-84393 - CVSS 8.1 (high), 2026-09-08: A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow…
• CVE-2026-26084 - CVSS 9.9 (critical), 2026-09-08: A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through…
• CVE-2026-84385 - CVSS 5.4 (medium), 2026-09-08: A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions,…
• CVE-2026-84389 - CVSS 3.1 (low), 2026-09-08: A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow…
• CVE-2026-84387 - CVSS 7.2 (high), 2026-09-08: A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through…
• CVE-2026-84386 - CVSS 5.1 (medium), 2026-09-08: A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper…
• CVE-2026-70468 - CVSS 8.1 (high), 2026-08-12: A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…
• CVE-2026-26035 - CVSS 9.8 (critical), 2026-08-12: An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0…
• CVE-2026-71407 - CVSS 8.1 (high), 2026-08-12: A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can…
• CVE-2026-70467 - CVSS 3.8 (low), 2026-08-12: A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2…
• CVE-2026-70466 - CVSS 5.3 (medium), 2026-08-12: A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions,…