Fortinet
FortiProxy vulnerabilities (CVE): affected branches, fixed releases, CISA KEV
Affected branches, fixed releases stated by the vendor and known exploitation for Fortinet FortiProxy.
Sources last modified 8 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 12:17 UTC
- 36
- CVEs tracked
- 12
- Critical
- 8
- CISA KEV
- 0
- With a fixed release
Versions by branch
Per branch: the newest release the vendor lists, what the vendor recommends and for whom, the support state and when Patcharo last verified each fact. Three facts read from the vendor's documents and shown apart: the newest release is not a recommendation.
8 branches shown
- 7.6Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportSupported · until 30 Mar 2029Vulnerabilities11 CVEs · 2 KEVnewest fix 7.6.5 - 7.4Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportSupported · until 24 Jan 2028Vulnerabilities25 CVEs · 4 KEVnewest fix 7.4.13 - 7.2Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportApproaching end of support · until 20 Mar 2027Vulnerabilities32 CVEs · 8 KEVnewest fix 7.2.16 - 7.0Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportEnd of life · until 24 Feb 2026Vulnerabilities32 CVEs · 8 KEVnewest fix 7.0.23 - 2.0Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportEnd of life · until 15 May 2025Vulnerabilities17 CVEs · 3 KEVnewest fix 2.0.15 - 1.2Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportEnd of life · until 30 Jul 2023Vulnerabilities12 CVEs · 3 KEV - 1.1Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportEnd of life · until 22 Jun 2023Vulnerabilities12 CVEs · 3 KEV - 1.0Not collectedLatest public release
No release listed in the sources Patcharo reads
Vendor recommendationNo public recommendation source for this vendor
SupportEnd of life · until 11 Oct 2022Vulnerabilities10 CVEs · 2 KEV
Last successful check against the source. The content may be unchanged. Checked about every 6 hours (192 hours for a branch past its support); “page verified recently” means a successful check within the last 24 hours. Availability, recommendation and support are read from the vendor's documents and shown apart; a release Patcharo lists is not advice to install it.
Vulnerability history
Every CVE NVD attaches to FortiProxy over the period, whatever its score: published records only, rejected identifiers kept apart. Counts are publication counts.
Last 10 years · 14 Nov 2016 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.
The history could not be read right now. The list below shows the analysed catalog only.
Verified history · History not collected yet: the counts above are not a measure.
Scores and statuses are the facts known today, not their history.
CVEs published over the period
14 Nov 2016 – 14 Nov 2026 · Newest first. A record analysed by Patcharo links to its page with affected and fixed releases; the others show NVD's facts.
The history could not be read right now. The list below shows the analysed catalog only.
Analysed vulnerabilities
- CVE-2026-71407Published: High8.1CVSS 3.1, HighNoEPSS0.42%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
- CVE-2026-24858Published: Critical9.8CVSS 3.1, CriticalKEVDue 30 Jan 2026EPSS86%
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
Fortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer
- CVE-2025-59718Published: Critical9.8CVSS 3.1, CriticalKEVDue 23 Dec 2025EPSS68%
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
- CVE-2023-46718Published: High7.8CVSS 3.1, HighNoEPSS0.19%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2024-50571Published: High7.2CVSS 3.1, HighNoEPSS0.54%
Fortinet FortiManager, Fortinet FortiOS, Fortinet FortiAnalyzer
- CVE-2025-22258Published: High7.2CVSS 3.1, HighNoEPSS0.56%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
- CVE-2025-25253Published: High7.5CVSS 3.1, HighNoEPSS0.11%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2025-57740Published: High8.8CVSS 3.1, HighNoEPSS0.68%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2024-26009Published: High8.1CVSS 3.1, HighNoEPSS0.59%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2023-45584Published: High7.2CVSS 3.1, HighNoEPSS0.59%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2024-52965Published: High7.2CVSS 3.1, HighNoEPSS0.28%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2025-22254Published: High7.2CVSS 3.1, HighNoEPSS0.85%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiWeb
- CVE-2025-22252Published: High7.2CVSS 3.1, HighNoEPSS0.94%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiSwitchManager
- CVE-2024-26013Published: High7.5CVSS 3.1, HighNoEPSS0.50%
Fortinet FortiProxy, Fortinet FortiManager, Fortinet FortiOS
- CVE-2023-37930Published: High8.8CVSS 3.1, HighNoEPSS0.63%
Fortinet FortiProxy, Fortinet FortiOS
- CVE-2023-25610Published: Critical9.8CVSS 3.1, CriticalNoEPSS18%
Fortinet FortiAnalyzer, Fortinet FortiProxy, Fortinet FortiOS
- CVE-2024-45324Published: High7.2CVSS 3.1, HighNoEPSS0.72%
Fortinet FortiWeb, Fortinet FortiProxy, Fortinet FortiOS
- CVE-2025-24472Published: High8.1CVSS 3.1, HighKEVRansomwareDue 8 Apr 2025EPSS7%
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2024-48886Published: Critical9.8CVSS 3.1, CriticalNoEPSS0.48%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2024-48884Published: Critical9.1CVSS 3.1, CriticalNoEPSS15%
Fortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS
- CVE-2024-46670Published: High7.5CVSS 3.1, HighNoEPSS0.63%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
- CVE-2024-55591Published: Critical9.8CVSS 3.1, CriticalKEVRansomwareDue 21 Jan 2025EPSS94%
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2024-26011Published: Critical9.8CVSS 3.1, CriticalNoEPSS0.60%
Fortinet FortiManager, Fortinet FortiProxy, Fortinet FortiOS
- CVE-2022-45862Published: High8.8CVSS 3.1, HighNoEPSS0.44%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiPAM
- CVE-2024-26010Published: High7.5CVSS 3.1, HighNoEPSS0.79%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
- CVE-2023-45583Published: High7.2CVSS 3.1, HighNoEPSS0.66%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
- CVE-2023-41677Published: High8.8CVSS 3.1, HighNoEPSS0.75%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2023-42789Published: Critical9.8CVSS 3.1, CriticalNoEPSS3%
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiSASE
- CVE-2023-42790Published: High8.1CVSS 3.1, HighNoEPSS1%
Fortinet FortiProxy, Fortinet FortiOS
- CVE-2023-29180Published: High7.5CVSS 3.1, HighNoEPSS3%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2023-29181Published: High8.8CVSS 3.1, HighNoEPSS0.72%
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM
- CVE-2024-23113Published: Critical9.8CVSS 3.1, CriticalKEVDue 30 Oct 2024EPSS62%
Fortinet Multiple Products Format String Vulnerability
Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
- CVE-2024-21762Published: Critical9.8CVSS 3.1, CriticalKEVRansomwareDue 16 Feb 2024EPSS83%
Fortinet FortiOS Out-of-Bound Write Vulnerability
Fortinet FortiProxy, Fortinet FortiOS
- CVE-2023-44250Published: High8.8CVSS 3.1, HighNoEPSS0.90%
Fortinet FortiOS, Fortinet FortiProxy
- CVE-2023-27997Published: Critical9.8CVSS 3.1, CriticalKEVRansomwareDue 4 Jul 2023EPSS86%
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Fortinet FortiProxy, Fortinet FortiOS, Fortinet FortiOS-6K7K
- CVE-2022-42475Published: Critical9.8CVSS 3.1, CriticalKEVRansomwareDue 3 Jan 2023EPSS99%
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Fortinet FortiProxy, Fortinet FortiOS
Vendor recommendation
The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.
Fortinet publishes no recommended-release page Patcharo can read. The fixed releases on this site come from the security advisories only; nothing is inferred from version numbers.
CERT-FR
Advisories and alerts of the French national CERT referencing the CVEs of this product.
- Advisory (AVI)CERTFR-2026-AVI-1015Multiple vulnerabilities in Fortinet productsPublished 13 Aug 2026
- Advisory (AVI)CERTFR-2026-AVI-0097Vulnerability in Fortinet productsPublished 28 Jan 2026
- Advisory (AVI)CERTFR-2025-AVI-1084Multiple vulnerabilities in Fortinet productsPublished 10 Dec 2025
- Advisory (AVI)CERTFR-2025-AVI-0871Multiple vulnerabilities in Fortinet productsPublished 15 Oct 2025
- Advisory (AVI)CERTFR-2025-AVI-0679Multiple vulnerabilities in Fortinet productsPublished 13 Aug 2025
- Advisory (AVI)CERTFR-2025-AVI-0575Multiple vulnerabilities in Fortinet productsPublished 9 Jul 2025
- Advisory (AVI)CERTFR-2025-AVI-0496Multiple vulnerabilities in Fortinet productsPublished 11 Jun 2025
- Advisory (AVI)CERTFR-2025-AVI-0399Multiple vulnerabilities in Fortinet productsPublished 13 May 2025
- Advisory (AVI)CERTFR-2025-AVI-0293Multiple vulnerabilities in Fortinet productsPublished 9 Apr 2025
- Advisory (AVI)CERTFR-2025-AVI-0197Multiple vulnerabilities in Fortinet productsPublished 12 Mar 2025
Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.