Skip to content
Patcharo

Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

Active criteria

107 vulnerabilities · sorted by Publication date — newest first

31–60 of 107

  1. CVE-2025-53744

    An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.…

    FortinetFortinet FortiOS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.63%
    PublishedFix stated
  2. CVE-2025-25257

    Fortinet FortiWeb SQL Injection Vulnerability

    FortinetFortinet FortiWeb

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 8 Aug 2025
    EPSS100%
    PublishedFix stated
  3. CVE-2024-52965

    A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7…

    FortinetFortinet FortiOS, Fortinet FortiProxy

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.28%
    PublishedFix stated
  4. CVE-2025-22254

    An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.…

    FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiWeb

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.85%
    PublishedFix stated
  5. CVE-2025-22252

    A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwit…

    FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiSwitchManager

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.94%
    PublishedFix stated
  6. CVE-2025-32756

    Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

    FortinetFortinet FortiNDR, Fortinet FortiCamera, Fortinet FortiRecorder

    Severity · CVSSCritical9.8
    Known exploitationKEVDue 4 Jun 2025
    EPSS30%
    PublishedFix stated
  7. CVE-2024-50565

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet For…

    FortinetFortinet FortiOS, Fortinet FortiWeb, Fortinet FortiAnalyzer

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.39%
    PublishedFix stated
  8. CVE-2024-26013

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet For…

    FortinetFortinet FortiProxy, Fortinet FortiManager, Fortinet FortiOS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.50%
    PublishedFix stated
  9. CVE-2023-37930

    Multiple issues including the use of uninitialized ressources [CWE-908] and excessive iteration [CWE-834] vul…

    FortinetFortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.63%
    PublishedFix stated
  10. CVE-2023-25610

    A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS ve…

    FortinetFortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS18%
    PublishedFix stated
  11. CVE-2020-9295

    FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and be…

    FortinetFortinet FortiClientWindows

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.32%
    PublishedNo fix stated
  12. CVE-2024-46662

    A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManage…

    FortinetFortinet FortiManager

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS2%
    PublishedFix stated
  13. CVE-2024-45324

    A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, …

    FortinetFortinet FortiWeb, Fortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.72%
    PublishedFix stated
  14. CVE-2025-24472

    Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

    FortinetFortinet FortiOS, Fortinet FortiProxy

    Severity · CVSSHigh8.1
    Known exploitationKEVRansomwareDue 8 Apr 2025
    EPSS7%
    PublishedFix stated
  15. CVE-2024-40584

    An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability […

    FortinetFortinet FortiAnalyzer, Fortinet FortiManager

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS2%
    PublishedFix stated
  16. CVE-2024-33504

    A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0…

    FortinetFortinet FortiManager

    Severity · CVSSHigh7.7
    Known exploitationNone known
    EPSS0.30%
    PublishedFix stated
  17. CVE-2024-35279

    A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and ver…

    FortinetFortinet FortiOS

    Severity · CVSSHigh8.1
    Known exploitationNone known
    EPSS1%
    PublishedFix stated
  18. CVE-2024-40591

    An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.…

    FortinetFortinet FortiOS

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS0.62%
    PublishedFix stated
  19. CVE-2024-50563

    A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 throu…

    FortinetFortinet FortiAnalyzer, Fortinet FortiManager

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.58%
    PublishedFix stated
  20. CVE-2024-45331

    A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7…

    FortinetFortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer Cloud

    Severity · CVSSHigh7.8
    Known exploitationNone known
    EPSS0.21%
    PublishedFix stated
  21. CVE-2024-47571

    An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows a…

    FortinetFortinet FortiManager

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.91%
    PublishedFix stated
  22. CVE-2024-35277

    A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiMan…

    FortinetFortinet FortiManager

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS0.71%
    PublishedFix stated
  23. CVE-2024-33502

    An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…

    FortinetFortinet FortiManager, Fortinet FortiAnalyzer

    Severity · CVSSHigh7.2
    Known exploitationNone known
    EPSS1%
    PublishedFix stated
  24. CVE-2024-48886

    A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.…

    FortinetFortinet FortiOS, Fortinet FortiProxy

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.48%
    PublishedFix stated
  25. CVE-2024-33503

    A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManage…

    FortinetFortinet FortiManager, Fortinet FortiManager Cloud

    Severity · CVSSHigh7.8
    Known exploitationNone known
    EPSS0.22%
    PublishedFix stated
  26. CVE-2024-48884

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet Fo…

    FortinetFortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS

    Severity · CVSSCritical9.1
    Known exploitationNone known
    EPSS15%
    PublishedFix stated
  27. CVE-2024-46668

    An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 thr…

    FortinetFortinet FortiOS

    Severity · CVSSHigh7.5
    Known exploitationNone known
    EPSS1.00%
    PublishedFix stated
  28. CVE-2024-35273

    A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 throu…

    FortinetFortinet FortiAnalyzer, Fortinet FortiManager

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.66%
    PublishedFix stated
  29. CVE-2024-35276

    A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.…

    FortinetFortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiManager Cloud

    Severity · CVSSCritical9.8
    Known exploitationNone known
    EPSS0.42%
    PublishedFix stated
  30. CVE-2024-35275

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnaly…

    FortinetFortinet FortiManager, Fortinet FortiAnalyzer

    Severity · CVSSHigh8.8
    Known exploitationNone known
    EPSS0.82%
    PublishedFix stated