Skip to content
Patcharo

Fortinet

FortiManager vulnerabilities (CVE): affected branches, fixed releases, CISA KEV

Affected branches, fixed releases stated by the vendor and known exploitation for Fortinet FortiManager.

Sources last modified 8 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 12:17 UTC

34
CVEs tracked
10
Critical
2
CISA KEV
0
With a fixed release

Versions by branch

Per branch: the newest release the vendor lists, what the vendor recommends and for whom, the support state and when Patcharo last verified each fact. Three facts read from the vendor's documents and shown apart: the newest release is not a recommendation.

Filter the branches

21 branches shown

  1. 8.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 21 Oct 2030
    Vulnerabilities0 CVEs
  2. 7.6Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 29 Jan 2030
    Vulnerabilities13 CVEs · 2 KEVnewest fix 7.6.6
  3. 7.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportSupported · until 15 Nov 2028
    Vulnerabilities32 CVEs · 2 KEVnewest fix 7.4.10
  4. 7.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportApproaching end of support · until 11 Oct 2026
    Vulnerabilities28 CVEs · 2 KEVnewest fix 7.2.12
  5. 7.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 22 Oct 2025
    Vulnerabilities25 CVEs · 2 KEVnewest fix 7.0.16
  6. 6.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 9 Oct 2024
    Vulnerabilities21 CVEs · 1 KEVnewest fix 6.4.15
  7. 6.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 11 Oct 2023
    Vulnerabilities11 CVEs · 1 KEVnewest fix 6.2.13
  8. 6.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 18 Oct 2022
    Vulnerabilities5 CVEsnewest fix 6.0.12
  9. 5.6Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 27 Jan 2022
    Vulnerabilities1 CVEnewest fix 5.6.11
  10. 5.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 17 Aug 2020
    Vulnerabilities1 CVE
  11. 5.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 23 Feb 2019
    Vulnerabilities1 CVE
  12. 5.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 1 May 2017
    Vulnerabilities1 CVE
  13. 4.3Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 30 Jun 2014
    Vulnerabilities0 CVEs
  14. 4.2Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 3 Apr 2013
    Vulnerabilities0 CVEs
  15. 4.1Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 11 Sept 2012
    Vulnerabilities0 CVEs
  16. 4.0Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 12 Mar 2012
    Vulnerabilities0 CVEs
  17. 3.7Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 23 Jul 2011
    Vulnerabilities0 CVEs
  18. 3.6Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 11 Feb 2011
    Vulnerabilities0 CVEs
  19. 3.5Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 11 Jul 2010
    Vulnerabilities0 CVEs
  20. 3.4Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 9 Mar 2010
    Vulnerabilities0 CVEs
  21. 3.3Not collected
    Latest public release

    No release listed in the sources Patcharo reads

    Vendor recommendation

    No public recommendation source for this vendor

    SupportEnd of life · until 31 Jan 2010
    Vulnerabilities0 CVEs

Last successful check against the source. The content may be unchanged. Checked about every 6 hours (192 hours for a branch past its support); “page verified recently” means a successful check within the last 24 hours. Availability, recommendation and support are read from the vendor's documents and shown apart; a release Patcharo lists is not advice to install it.

Vulnerability history

Every CVE NVD attaches to FortiManager over the period, whatever its score: published records only, rejected identifiers kept apart. Counts are publication counts.

Last 10 years · 14 Nov 2016 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.

The history could not be read right now. The list below shows the analysed catalog only.

Verified history · History not collected yet: the counts above are not a measure.

Scores and statuses are the facts known today, not their history.

CVEs published over the period

14 Nov 2016 – 14 Nov 2026 · Newest first. A record analysed by Patcharo links to its page with affected and fixed releases; the others show NVD's facts.

The history could not be read right now. The list below shows the analysed catalog only.

Analysed vulnerabilities

  1. CVE-2026-70468Published:

    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Fort…

    Fortinet FortiManager, Fortinet FortiManager Cloud

    High8.1CVSS 3.1, HighEPSS0.46%
  2. CVE-2025-61848Published:

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fort…

    Fortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer-BigData

    High7.2CVSS 3.1, HighEPSS0.51%
  3. CVE-2025-48418Published:

    A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 throu…

    Fortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiAnalyzer Cloud

    High7.2CVSS 3.1, HighEPSS0.52%
  4. CVE-2026-22572Published:

    An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 thr…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High7.2CVSS 3.1, HighEPSS0.56%
  5. CVE-2025-68648Published:

    A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, For…

    Fortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiManager Cloud

    High7.2CVSS 3.1, HighEPSS0.57%
  6. CVE-2025-54820Published:

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.…

    Fortinet FortiManager

    High8.1CVSS 3.1, HighEPSS0.87%
  7. CVE-2026-24858Published:

    Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Fortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer

    Critical9.8CVSS 3.1, CriticalKEVDue 30 Jan 2026EPSS86%
  8. CVE-2024-50571Published:

    A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0…

    Fortinet FortiManager, Fortinet FortiOS, Fortinet FortiAnalyzer

    High7.2CVSS 3.1, HighEPSS0.54%
  9. CVE-2024-26013Published:

    A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet For…

    Fortinet FortiProxy, Fortinet FortiManager, Fortinet FortiOS

    High7.5CVSS 3.1, HighEPSS0.50%
  10. CVE-2023-25610Published:

    A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS ve…

    Fortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiOS

    Critical9.8CVSS 3.1, CriticalEPSS18%
  11. CVE-2024-46662Published:

    A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManage…

    Fortinet FortiManager

    High8.8CVSS 3.1, HighEPSS2%
  12. CVE-2024-40584Published:

    An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability […

    Fortinet FortiAnalyzer, Fortinet FortiManager

    High7.2CVSS 3.1, HighEPSS2%
  13. CVE-2024-33504Published:

    A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0…

    Fortinet FortiManager

    High7.7CVSS 3.1, HighEPSS0.30%
  14. CVE-2024-50563Published:

    A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 throu…

    Fortinet FortiAnalyzer, Fortinet FortiManager

    Critical9.8CVSS 3.1, CriticalEPSS0.58%
  15. CVE-2024-45331Published:

    A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7…

    Fortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer Cloud

    High7.8CVSS 3.1, HighEPSS0.21%
  16. CVE-2024-47571Published:

    An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows a…

    Fortinet FortiManager

    Critical9.8CVSS 3.1, CriticalEPSS0.91%
  17. CVE-2024-35277Published:

    A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiMan…

    Fortinet FortiManager

    High7.5CVSS 3.1, HighEPSS0.71%
  18. CVE-2024-33502Published:

    An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High7.2CVSS 3.1, HighEPSS1%
  19. CVE-2024-33503Published:

    A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManage…

    Fortinet FortiManager, Fortinet FortiManager Cloud

    High7.8CVSS 3.1, HighEPSS0.22%
  20. CVE-2024-48884Published:

    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet Fo…

    Fortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS

    Critical9.1CVSS 3.1, CriticalEPSS15%
  21. CVE-2024-35273Published:

    A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 throu…

    Fortinet FortiAnalyzer, Fortinet FortiManager

    High8.8CVSS 3.1, HighEPSS0.66%
  22. CVE-2024-35276Published:

    A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.…

    Fortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiManager Cloud

    Critical9.8CVSS 3.1, CriticalEPSS0.42%
  23. CVE-2024-35275Published:

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnaly…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High8.8CVSS 3.1, HighEPSS0.82%
  24. CVE-2024-36512Published:

    An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, F…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High7.2CVSS 3.1, HighEPSS1%
  25. CVE-2024-50566Published:

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in…

    Fortinet FortiManager, Fortinet FortiManager Cloud

    High8.8CVSS 3.1, HighEPSS1%
  26. CVE-2021-32589Published:

    A Use After Free (CWE-416) vulnerability in FortiManager version 7.0.0, version 6.4.5 and below, version 6.2.…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    Critical9.8CVSS 3.1, CriticalEPSS9%
  27. CVE-2024-48889Published:

    An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability […

    Fortinet FortiManager

    High7.2CVSS 3.1, HighEPSS2%
  28. CVE-2024-33505Published:

    A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.…

    Fortinet FortiAnalyzer, Fortinet FortiManager

    High7.3CVSS 3.1, HighEPSS0.48%
  29. CVE-2024-26011Published:

    A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 th…

    Fortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS

    Critical9.8CVSS 3.1, CriticalEPSS0.60%
  30. CVE-2024-23666Published:

    A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 an…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High8.8CVSS 3.1, HighEPSS3%
  31. CVE-2024-47575Published:

    Fortinet FortiManager Missing Authentication Vulnerability

    Fortinet FortiManager

    Critical9.8CVSS 3.1, CriticalKEVDue 13 Nov 2024EPSS95%
  32. CVE-2024-21757Published:

    A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High7.8CVSS 3.1, HighEPSS0.19%
  33. CVE-2023-36554Published:

    A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 …

    Fortinet FortiManager

    Critical9.8CVSS 3.1, CriticalEPSS0.77%
  34. CVE-2023-42791Published:

    A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High8.8CVSS 3.1, HighEPSS3%

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Fortinet publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.

CERT-FR

Advisories and alerts of the French national CERT referencing the CVEs of this product.

  • Advisory (AVI)CERTFR-2026-AVI-1015Multiple vulnerabilities in Fortinet productsPublished 13 Aug 2026
  • Advisory (AVI)CERTFR-2026-AVI-0440Multiple vulnerabilities in Fortinet productsPublished 15 Apr 2026
  • Advisory (AVI)CERTFR-2026-AVI-0265Multiple vulnerabilities in Fortinet productsPublished 11 Mar 2026
  • Advisory (AVI)CERTFR-2026-AVI-0097Vulnerability in Fortinet productsPublished 28 Jan 2026
  • Advisory (AVI)CERTFR-2025-AVI-0871Multiple vulnerabilities in Fortinet productsPublished 15 Oct 2025
  • Advisory (AVI)CERTFR-2025-AVI-0293Multiple vulnerabilities in Fortinet productsPublished 9 Apr 2025
  • Advisory (AVI)CERTFR-2025-AVI-0120Multiple vulnerabilities in Fortinet productsPublished 12 Feb 2025
  • Advisory (AVI)CERTFR-2025-AVI-0031Multiple vulnerabilities in Fortinet productsPublished 15 Jan 2025
  • Advisory (AVI)CERTFR-2025-AVI-0030Multiple vulnerabilities in Fortinet productsPublished 14 Jan 2025 · updated 12 Feb 2025
  • Advisory (AVI)CERTFR-2024-AVI-1096Multiple vulnerabilities in Fortinet productsPublished 19 Dec 2024

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

Official sources