Vulnerabilities
Vulnerabilities affecting firewalls and security appliances, with vendor fix data, CISA KEV status and EPSS.
Intelligence updated 30 Sept 2026 at 12:52 UTC
106 vulnerabilities
- CVE-2026-7046812 Aug 2026
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Fort…
High8.1CVSS 3.1, High0.46% - CVE-2026-7140712 Aug 2026
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 m…
High8.1CVSS 3.1, High0.42% Fortinet FortiSandbox OS Command Injection Vulnerability
Critical9.8CVSS 3.1, Critical76%- CVE-2025-5384412 May 2026
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, For…
High8.8CVSS 3.1, High0.56% - CVE-2025-6184814 Apr 2026
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fort…
High7.2CVSS 3.1, High0.51% - CVE-2025-5384714 Apr 2026
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS…
High8.8CVSS 3.1, High0.28% Fortinet FortiSandbox OS Command Injection Vulnerability
Critical9.8CVSS 3.1, Critical47%Fortinet FortiClient EMS Improper Access Control Vulnerability
Critical9.8CVSS 3.1, Critical9%- CVE-2025-4841810 Mar 2026
A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 throu…
High7.2CVSS 3.1, High0.52% - CVE-2026-2257210 Mar 2026
An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 thr…
High7.2CVSS 3.1, High0.56% - CVE-2025-6864810 Mar 2026
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, For…
High7.2CVSS 3.1, High0.57% - CVE-2025-5482010 Mar 2026
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.…
High8.1CVSS 3.1, High0.87% Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium5.9CVSS 3.1, Medium30%- CVE-2025-6415710 Feb 2026
A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7…
High7.2CVSS 3.1, High1% - CVE-2026-2215310 Feb 2026
An Authentication Bypass by Primary Weakness vulnerability [CWE-305] vulnerability in Fortinet FortiOS 7.6.0 …
High8.1CVSS 3.1, High0.71% Fortinet FortiClient EMS SQL Injection Vulnerability
Critical9.8CVSS 3.1, Critical94%Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Critical9.8CVSS 3.1, Critical86%Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, Critical4%Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
Critical9.8CVSS 3.1, Critical68%- CVE-2025-5384318 Nov 2025
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…
High7.5CVSS 3.1, High0.59% - CVE-2025-5841318 Nov 2025
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.…
High7.5CVSS 3.1, High0.32% Fortinet FortiWeb OS Command Injection Vulnerability
High7.2CVSS 3.1, High56%Fortinet FortiWeb Path Traversal Vulnerability
Critical9.8CVSS 3.1, Critical92%- CVE-2023-4671814 Oct 2025
A stack-based buffer overflow in Fortinet FortiOS version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.7 and 7.0…
High7.8CVSS 3.1, High0.19% - CVE-2024-5057114 Oct 2025
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0…
High7.2CVSS 3.1, High0.54% - CVE-2025-2225814 Oct 2025
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1…
High7.2CVSS 3.1, High0.56% - CVE-2025-2525314 Oct 2025
An Improper Validation of Certificate with Host Mismatch vulnerability [CWE-297] in FortiProxy version 7.6.1 …
High7.5CVSS 3.1, High0.11% - CVE-2025-5774014 Oct 2025
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and b…
High8.8CVSS 3.1, High0.68% - CVE-2024-2600912 Aug 2025
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0…
High8.1CVSS 3.1, High0.59% - CVE-2023-4558412 Aug 2025
A double free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, F…
High7.2CVSS 3.1, High0.59%