FortiWeb vulnerabilities (CVE): affected branches, fixed releases, CISA KEV
Patcharo tracks 8 vulnerabilities matched against Fortinet FortiWeb versions: 4 critical, 4 known exploited (CISA KEV), 0 with a fixed release. Last source modification: 17 Jun 2026.
Last verified by Patcharo: 30 Sept 2026 at 09:17 UTC
Branches
Per branch: matched CVEs, CISA KEV entries, the newest fixed release stated by the vendor and the support status.
| Branch | CVEs | KEV | Newest fix stated | Support |
|---|---|---|---|---|
| 8.0 | 2 | 2 | — | — |
| 7.6 | 6 | 4 | — | — |
| 7.4 | 7 | 4 | — | — |
| 7.2 | 6 | 3 | — | — |
| 7.0 | 6 | 3 | — | — |
| 6.4 | 1 | 0 | — | — |
| 6.3 | 1 | 0 | — | — |
| 6.2 | 1 | 0 | — | — |
| 6.1 | 1 | 0 | — | — |
All FortiWeb CVEs
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
FortiWeb, FortiOS, FortiAnalyzer, FortiProxy, FortiManagerCritical9.8CVSS 3.1, Critical86%Fortinet FortiWeb OS Command Injection Vulnerability
FortiWebHigh7.2CVSS 3.1, High56%Fortinet FortiWeb Path Traversal Vulnerability
FortiWebCritical9.8CVSS 3.1, Critical92%Fortinet FortiWeb SQL Injection Vulnerability
FortiWebCritical9.8CVSS 3.1, Critical100%- FortiOS, FortiProxy, FortiWebHigh7.2CVSS 3.1, High0.85%
- FortiOS, FortiWeb, FortiAnalyzerHigh7.5CVSS 3.1, High0.39%
- FortiAnalyzer, FortiProxy, FortiOS, FortiManager, FortiWebCritical9.8CVSS 3.1, Critical18%
- FortiWeb, FortiProxy, FortiOSHigh7.2CVSS 3.1, High0.72%