FortiOS
Fortinet FortiOS 7.0
Vulnerabilities, fixed releases, vendor recommendation and support status of the 7.0 branch, from official sources.
Sources last modified 30 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 12:17 UTC
- 48
- Matched CVEs
- 11
- CISA KEV
- 7.0.19
- Newest fix stated
- End of life · 30 Sept 2025
- Support
including 13 critical
In brief
- Recommended maintenance build
- No official recommendation
- Recommended release
- No official recommendation
- Releases listed by the vendor
- No release list read from the vendor
- CERT-FR
- 18 documents
Vulnerabilities affecting 7.0
Each record matched to this branch with the fixed release the source states, newest first.
- High8.8CVSS 3.1, HighFirst fixed release7.0.18Published
- High8.8CVSS 3.1, HighFirst fixed release7.0.18Published
- Medium5.9CVSS 3.1, MediumFirst fixed releaseMigration to a fixed release requiredPublished
- High7.2CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.19Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.18Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.18Published
- High7.5CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.5CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.8CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.2CVSS 3.1, HighFirst fixed release7.0.17Published
- High7.2CVSS 3.1, HighFirst fixed release7.0.17Published
- High7.5CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High8.8CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.2CVSS 3.1, HighFirst fixed release7.0.13Published
- High7.2CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.2CVSS 3.1, HighFirst fixed release7.0.17Published
- High7.2CVSS 3.1, HighFirst fixed release7.0.17Published
- High7.5CVSS 3.1, HighFirst fixed release7.0.16Published
- High7.5CVSS 3.1, HighFirst fixed release7.0.16Published
- High8.8CVSS 3.1, HighFirst fixed release7.0.13Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.10Published
- High7.2CVSS 3.1, HighFirst fixed release7.0.16Published
- High8.1CVSS 3.1, HighFirst fixed release7.0.17Published
- High7.2CVSS 3.1, HighFirst fixed release7.0.16Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.16Published
- Critical9.1CVSS 3.1, CriticalFirst fixed release7.0.16Published
- High7.5CVSS 3.1, HighFirst fixed release7.0.16Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.17Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.15Published
- High8.8CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High8.8CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High7.5CVSS 3.1, HighFirst fixed release7.0.15Published
- High7.8CVSS 3.1, HighFirst fixed release7.0.16Published
- High7.8CVSS 3.1, HighFirst fixed release7.0.14Published
- High7.2CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High8.8CVSS 3.1, HighFirst fixed release7.0.13Published
- High7.5CVSS 3.1, HighFirst fixed releaseMigration to a fixed release requiredPublished
- High8.8CVSS 3.1, HighFirst fixed releaseNot published in the sources followedPublished
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.13Published
- High8.1CVSS 3.1, HighFirst fixed release7.0.13Published
- High7.5CVSS 3.1, HighFirst fixed release7.0.12Published
- High8.8CVSS 3.1, HighFirst fixed release7.0.12Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.14Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.14Published
- CVE-2023-27997KEVRansomware
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.12Published - High7.1CVSS 3.1, HighFirst fixed release7.0.10Published
- Critical9.8CVSS 3.1, CriticalFirst fixed release7.0.9Published
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Recommended release per model
The vendor states one recommended release per hardware model (2 models); models are grouped by recommended release.
Vendor wording: “Recommended Release Version” · vendor statement dated 1 Jun 2026
- 7.0.19
- FortiGate-1200D, FortiGate-3800D
Source: Technical Tip: Recommended release for FortiOS (as of June 2026)last verified by Patcharo 30 Sept 2026 at 21:18 UTC
Support status
From the vendor's published life-cycle policy; support is not a recommendation.
- 7.0SupportEnd of lifeEnd of support30 Sept 2025
Fortinet Product Life Cycle (software) · retrieved 1 Oct 2026 at 13:38 UTC
CERT-FR advisories and alerts
Documents of the French national CERT referencing these CVEs, newest first.
- Advisory (AVI)CERTFR-2026-AVI-0575Multiple vulnerabilities in Fortinet productsPublished 13 May 2026
- Advisory (AVI)CERTFR-2026-AVI-0440Multiple vulnerabilities in Fortinet productsPublished 15 Apr 2026
- Advisory (AVI)CERTFR-2026-AVI-0147Multiple vulnerabilities in Fortinet productsPublished 11 Feb 2026
- Advisory (AVI)CERTFR-2026-AVI-0097Vulnerability in Fortinet productsPublished 28 Jan 2026
- Advisory (AVI)CERTFR-2026-AVI-0035Multiple vulnerabilities in Fortinet productsPublished 14 Jan 2026
- Advisory (AVI)CERTFR-2025-AVI-1084Multiple vulnerabilities in Fortinet productsPublished 10 Dec 2025
- Advisory (AVI)CERTFR-2025-AVI-1023Multiple vulnerabilities in Fortinet productsPublished 19 Nov 2025
- Advisory (AVI)CERTFR-2025-AVI-0871Multiple vulnerabilities in Fortinet productsPublished 15 Oct 2025
- Advisory (AVI)CERTFR-2025-AVI-0679Multiple vulnerabilities in Fortinet productsPublished 13 Aug 2025
- Advisory (AVI)CERTFR-2025-AVI-0575Multiple vulnerabilities in Fortinet productsPublished 9 Jul 2025
- Advisory (AVI)CERTFR-2025-AVI-0496Multiple vulnerabilities in Fortinet productsPublished 11 Jun 2025
- Advisory (AVI)CERTFR-2025-AVI-0293Multiple vulnerabilities in Fortinet productsPublished 9 Apr 2025
- Advisory (AVI)CERTFR-2025-AVI-0197Multiple vulnerabilities in Fortinet productsPublished 12 Mar 2025
- Advisory (AVI)CERTFR-2025-AVI-0120Multiple vulnerabilities in Fortinet productsPublished 12 Feb 2025
- Advisory (AVI)CERTFR-2025-AVI-0031Multiple vulnerabilities in Fortinet productsPublished 15 Jan 2025
- Alert (ALE)CERTFR-2025-ALE-002[Update] Vulnerability in Fortinet productsPublished 14 Jan 2025 · updated 7 May 2025 · closed 7 May 2025
- Advisory (AVI)CERTFR-2025-AVI-0030Multiple vulnerabilities in Fortinet productsPublished 14 Jan 2025 · updated 12 Feb 2025
- Advisory (AVI)CERTFR-2024-AVI-0979Multiple vulnerabilities in Fortinet productsPublished 13 Nov 2024
Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.
How Patcharo reads this
Affected and fixed releases come from the vendor's structured statements, matched by exact version and patch level. The recommendation is the vendor's own statement; the support status comes from its life-cycle policy. Unknown never becomes Not affected.
Read the methodologyRead the guide: FortiOS version numbering: branches, patch releases and the Feature and Mature labels