Public catalog

Vulnerabilities

Explore the vulnerabilities Patcharo tracks and find the ones that concern your technologies.

Intelligence updated 1 Oct 2026 at 13:38 UTC

Identifiers, titles, summaries, vendors and products of the whole published catalog; the results follow as you type.

Vendor

Product

Severity

Known exploitation

Published

Fix stated by the vendor (97)

Sort by

Active criteria

107 vulnerabilities · sorted by Publication date — newest first

1–30 of 107

CVE-2026-70468
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Fort…
FortinetFortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS0.46%
Published12 Aug 2026Fix stated
CVE-2026-71407
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 m…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS0.42%
Published12 Aug 2026Fix stated
CVE-2026-25089
Fortinet FortiSandbox OS Command Injection Vulnerability
FortinetFortinet FortiSandbox, Fortinet FortiSandbox Cloud, Fortinet FortiSandbox PaaS
Severity · CVSSCritical9.8
Known exploitationKEVDue 19 Jul 2026
EPSS76%
Published9 Jun 2026Fix stated
CVE-2025-53844
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, For…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.56%
Published12 May 2026Fix stated
CVE-2025-61848
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fort…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer-BigData
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.51%
Published14 Apr 2026Fix stated
CVE-2025-53847
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS…
FortinetFortinet FortiOS
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.28%
Published14 Apr 2026Fix stated
CVE-2026-39808
Fortinet FortiSandbox OS Command Injection Vulnerability
FortinetFortinet FortiSandbox, Fortinet FortiSandbox PaaS
Severity · CVSSCritical9.8
Known exploitationKEVDue 19 Jul 2026
EPSS47%
Published14 Apr 2026Fix stated
CVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability
FortinetFortinet FortiClient EMS
Severity · CVSSCritical9.8
Known exploitationKEVDue 9 Apr 2026
EPSS9%
Published4 Apr 2026Fix stated
CVE-2025-48418
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 throu…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiAnalyzer Cloud
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.52%
Published10 Mar 2026Fix stated
CVE-2026-22572
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 thr…
FortinetFortinet FortiManager, Fortinet FortiAnalyzer
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.56%
Published10 Mar 2026Fix stated
CVE-2025-68648
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, For…
FortinetFortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiManager Cloud
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.57%
Published10 Mar 2026Fix stated
CVE-2025-54820
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.…
FortinetFortinet FortiManager
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS0.87%
Published10 Mar 2026Fix stated
CVE-2025-68686
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
FortinetFortinet FortiOS
Severity · CVSSMedium5.9
Known exploitationKEVDue 10 Aug 2026
EPSS30%
Published10 Feb 2026Fix stated
CVE-2025-64157
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7…
FortinetFortinet FortiOS
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS1%
Published10 Feb 2026Fix stated
CVE-2026-22153
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 …
FortinetFortinet FortiOS
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS0.71%
Published10 Feb 2026Fix stated
CVE-2026-21643
Fortinet FortiClient EMS SQL Injection Vulnerability
FortinetFortinet FortiClient EMS
Severity · CVSSCritical9.8
Known exploitationKEVDue 16 Apr 2026
EPSS94%
Published6 Feb 2026Fix stated
CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
FortinetFortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer
Severity · CVSSCritical9.8
Known exploitationKEVDue 30 Jan 2026
EPSS86%
Published27 Jan 2026Fix stated
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
FortinetFortinet FortiOS, Fortinet FortiSwitchManager
Severity · CVSSCritical9.8
Known exploitationKEVDue 12 Sept 2026
EPSS4%
Published13 Jan 2026Fix stated
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
Severity · CVSSCritical9.8
Known exploitationKEVDue 23 Dec 2025
EPSS68%
Published9 Dec 2025Fix stated
CVE-2025-53843
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…
FortinetFortinet FortiOS
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.59%
Published18 Nov 2025Fix stated
CVE-2025-58413
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…
FortinetFortinet FortiOS, Fortinet FortiSASE
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.32%
Published18 Nov 2025Fix stated
CVE-2025-58034
Fortinet FortiWeb OS Command Injection Vulnerability
FortinetFortinet FortiWeb
Severity · CVSSHigh7.2
Known exploitationKEVDue 25 Nov 2025
EPSS56%
Published18 Nov 2025Fix stated
CVE-2025-64446
Fortinet FortiWeb Path Traversal Vulnerability
FortinetFortinet FortiWeb
Severity · CVSSCritical9.8
Known exploitationKEVDue 21 Nov 2025
EPSS92%
Published14 Nov 2025Fix stated
CVE-2023-46718
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0…
FortinetFortinet FortiOS, Fortinet FortiProxy
Severity · CVSSHigh7.8
Known exploitationNone known
EPSS0.19%
Published14 Oct 2025Fix stated
CVE-2024-50571
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0…
FortinetFortinet FortiManager, Fortinet FortiOS, Fortinet FortiAnalyzer
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.54%
Published14 Oct 2025Fix stated
CVE-2025-22258
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1…
FortinetFortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.56%
Published14 Oct 2025Fix stated
CVE-2025-25253
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 …
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
Severity · CVSSHigh7.5
Known exploitationNone known
EPSS0.11%
Published14 Oct 2025Fix stated
CVE-2025-57740
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and b…
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
Severity · CVSSHigh8.8
Known exploitationNone known
EPSS0.68%
Published14 Oct 2025Fix stated
CVE-2024-26009
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0…
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
Severity · CVSSHigh8.1
Known exploitationNone known
EPSS0.59%
Published12 Aug 2025Fix stated
CVE-2023-45584
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, F…
FortinetFortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
Severity · CVSSHigh7.2
Known exploitationNone known
EPSS0.59%
Published12 Aug 2025Fix stated