Skip to content
Patcharo

Vendors

Fortinet vulnerabilities: CVE, KEV, fixed releases

Fortinet vulnerabilities, tracked with their affected releases, the vendor's official fixes and known exploitation.

Sources last modified 30 Sept 2026 · Last verified by Patcharo: 1 Oct 2026 at 12:17 UTC

107
CVEs tracked
30
Critical
30
CISA KEV
0
With a fixed release

Published CVEs per product

Distinct CVEs NVD attaches to each product over the period chosen, whatever their score. A CVE common to two products counts in each.

Compare products

Last 10 years · 14 Nov 2016 – 14 Nov 2026 · Rolling calendar period, by publication date of the CVE record; both days included.

The history could not be read right now. The list below shows the analysed catalog only.

Products covered

Each product has its own page with affected branches and fixed releases.

Versions

The newest release and the vendor's recommendation of each current branch, per product.

  • FortiOS

    All branches of FortiOS
    • 8.0Latest public release —Not collected
    • 7.6Latest public release — · Vendor recommendation 7.6.6Not collected
    • 7.4Latest public release — · Vendor recommendation 7.4.11Not collected

Latest vulnerabilities

Newest source publication first.

All Fortinet CVEs
  1. CVE-2026-70468Published:

    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Fort…

    Fortinet FortiManager, Fortinet FortiManager Cloud

    High8.1CVSS 3.1, HighEPSS0.46%
  2. CVE-2026-71407Published:

    A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 m…

    Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiPAM

    High8.1CVSS 3.1, HighEPSS0.42%
  3. CVE-2026-25089Published:

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox, Fortinet FortiSandbox Cloud, Fortinet FortiSandbox PaaS

    Critical9.8CVSS 3.1, CriticalKEVDue 19 Jul 2026EPSS76%
  4. CVE-2025-53844Published:

    A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, For…

    Fortinet FortiOS

    High8.8CVSS 3.1, HighEPSS0.56%
  5. CVE-2025-61848Published:

    An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fort…

    Fortinet FortiManager, Fortinet FortiAnalyzer, Fortinet FortiAnalyzer-BigData

    High7.2CVSS 3.1, HighEPSS0.51%
  6. CVE-2025-53847Published:

    A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS…

    Fortinet FortiOS

    High8.8CVSS 3.1, HighEPSS0.28%
  7. CVE-2026-39808Published:

    Fortinet FortiSandbox OS Command Injection Vulnerability

    Fortinet FortiSandbox, Fortinet FortiSandbox PaaS

    Critical9.8CVSS 3.1, CriticalKEVDue 19 Jul 2026EPSS47%
  8. CVE-2026-35616Published:

    Fortinet FortiClient EMS Improper Access Control Vulnerability

    Fortinet FortiClient EMS

    Critical9.8CVSS 3.1, CriticalKEVDue 9 Apr 2026EPSS9%
  9. CVE-2025-48418Published:

    A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 throu…

    Fortinet FortiAnalyzer, Fortinet FortiManager, Fortinet FortiAnalyzer Cloud

    High7.2CVSS 3.1, HighEPSS0.52%
  10. CVE-2026-22572Published:

    An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 thr…

    Fortinet FortiManager, Fortinet FortiAnalyzer

    High7.2CVSS 3.1, HighEPSS0.56%

Known exploited (CISA KEV)

Vulnerabilities CISA lists as exploited, with the federal remediation due date.

All Fortinet KEV entries
  1. CVE-2025-25249Published:

    Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

    Fortinet FortiOS, Fortinet FortiSwitchManager

    Critical9.8CVSS 3.1, CriticalKEVDue 12 Sept 2026EPSS4%
  2. CVE-2025-68686Published:

    Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

    Fortinet FortiOS

    Medium5.9CVSS 3.1, MediumKEVDue 10 Aug 2026EPSS30%
  3. CVE-2026-21643Published:

    Fortinet FortiClient EMS SQL Injection Vulnerability

    Fortinet FortiClient EMS

    Critical9.8CVSS 3.1, CriticalKEVDue 16 Apr 2026EPSS94%
  4. CVE-2026-24858Published:

    Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

    Fortinet FortiWeb, Fortinet FortiOS, Fortinet FortiAnalyzer

    Critical9.8CVSS 3.1, CriticalKEVDue 30 Jan 2026EPSS86%
  5. CVE-2025-59718Published:

    Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

    Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager

    Critical9.8CVSS 3.1, CriticalKEVDue 23 Dec 2025EPSS68%
  6. CVE-2025-58034Published:

    Fortinet FortiWeb OS Command Injection Vulnerability

    Fortinet FortiWeb

    High7.2CVSS 3.1, HighKEVDue 25 Nov 2025EPSS56%
  7. CVE-2025-64446Published:

    Fortinet FortiWeb Path Traversal Vulnerability

    Fortinet FortiWeb

    Critical9.8CVSS 3.1, CriticalKEVDue 21 Nov 2025EPSS92%
  8. CVE-2025-25257Published:

    Fortinet FortiWeb SQL Injection Vulnerability

    Fortinet FortiWeb

    Critical9.8CVSS 3.1, CriticalKEVDue 8 Aug 2025EPSS100%
  9. CVE-2019-6693Published:

    Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

    Fortinet FortiGate

    Medium6.5CVSS 3.1, MediumKEVRansomwareDue 16 Jul 2025EPSS6%
  10. CVE-2025-32756Published:

    Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

    Fortinet FortiNDR, Fortinet FortiCamera, Fortinet FortiRecorder

    Critical9.8CVSS 3.1, CriticalKEVDue 4 Jun 2025EPSS30%

Vendor recommendation

The vendor's own statement about what to run, with its date and source. Separate from vulnerabilities and from support status: being behind a recommendation is not a vulnerability, and a supported release is not necessarily the recommended one.

Recommended release per model on the FortiOS page

CERT-FR

Advisories and alerts of the French national CERT referencing the vendor.

Some titles in this list are machine-translated by artificial intelligence (Mistral AI) from the source texts; each record shows the original.

Support lifecycle

From the vendor's published life cycle policy.

  1. FortiAnalyzer7.2
    SupportApproaching end of support
    End of support11 Oct 2026
  2. FortiAnalyzer7.4
    SupportSupported
    End of support15 Nov 2028
  3. FortiAnalyzer7.6
    SupportSupported
    End of support29 Jan 2030
  4. FortiAnalyzer8.0
    SupportSupported
    End of support21 Oct 2030
  5. FortiClient EMS7.2
    SupportApproaching end of support
    End of support1 Aug 2027
  6. FortiClient EMS7.4
    SupportSupported
    End of support3 Dec 2028
  7. FortiClient EMS8.0
    SupportSupported
    End of support2 Jan 2031
  8. FortiManager7.2
    SupportApproaching end of support
    End of support11 Oct 2026
  9. FortiManager7.4
    SupportSupported
    End of support15 Nov 2028
  10. FortiManager7.6
    SupportSupported
    End of support29 Jan 2030
  11. FortiManager8.0
    SupportSupported
    End of support21 Oct 2030
  12. FortiOS7.4
    SupportSupported
    End of support11 Nov 2028
  13. FortiOS7.6
    SupportSupported
    End of support25 Jan 2030
  14. FortiOS8.0
    SupportSupported
    End of support21 Oct 2030
  15. FortiProxy7.2
    SupportApproaching end of support
    End of support20 Mar 2027
  16. FortiProxy7.4
    SupportSupported
    End of support24 Jan 2028
  17. FortiProxy7.6
    SupportSupported
    End of support30 Mar 2029
  18. FortiSandbox4.4
    SupportSupported
    End of support10 Jan 2028
  19. FortiSandbox5.0
    SupportSupported
    End of support7 May 2029
  20. FortiSandbox5.2
    SupportSupported
    End of support10 Dec 2030
  21. FortiWeb7.2
    SupportApproaching end of support
    End of support16 Jun 2027
  22. FortiWeb7.4
    SupportSupported
    End of support25 Jan 2028
  23. FortiWeb7.6
    SupportSupported
    End of support25 Dec 2028
  24. FortiWeb8.0
    SupportSupported
    End of support28 Jan 2030
101 branches past their end of life
  1. FortiAnalyzer3.3
    SupportEnd of life
    End of support2 Oct 2009
  2. FortiAnalyzer3.4
    SupportEnd of life
    End of support12 Jan 2010
  3. FortiAnalyzer3.5
    SupportEnd of life
    End of support12 Jul 2010
  4. FortiAnalyzer3.6
    SupportEnd of life
    End of support4 Feb 2011
  5. FortiAnalyzer3.7
    SupportEnd of life
    End of support6 Aug 2011
  6. FortiAnalyzer4.0
    SupportEnd of life
    End of support25 Feb 2012
  7. FortiAnalyzer4.1
    SupportEnd of life
    End of support24 Aug 2012
  8. FortiAnalyzer4.2
    SupportEnd of life
    End of support7 Apr 2013
  9. FortiAnalyzer4.3
    SupportEnd of life
    End of support30 Jun 2014
  10. FortiAnalyzer5.0
    SupportEnd of life
    End of support1 May 2017
  11. FortiAnalyzer5.2
    SupportEnd of life
    End of support4 Mar 2019
  12. FortiAnalyzer5.4
    SupportEnd of life
    End of support17 Aug 2020
  13. FortiAnalyzer5.6
    SupportEnd of life
    End of support27 Jan 2022
  14. FortiAnalyzer6.0
    SupportEnd of life
    End of support18 Oct 2022
  15. FortiAnalyzer6.2
    SupportEnd of life
    End of support11 Oct 2023
  16. FortiAnalyzer6.4
    SupportEnd of life
    End of support9 Oct 2024
  17. FortiAnalyzer7.0
    SupportEnd of life
    End of support22 Oct 2025
  18. FortiClient EMS1.0
    SupportEnd of life
    End of support9 Apr 2020
  19. FortiClient EMS1.2
    SupportEnd of life
    End of support15 Dec 2021
  20. FortiClient EMS6.0
    SupportEnd of life
    End of support30 Nov 2022
  21. FortiClient EMS6.2
    SupportEnd of life
    End of support16 Oct 2023
  22. FortiClient EMS6.4
    SupportEnd of life
    End of support12 Nov 2024
  23. FortiClient EMS7.0
    SupportEnd of life
    End of support27 Oct 2025
  24. FortiManager3.3
    SupportEnd of life
    End of support31 Jan 2010
  25. FortiManager3.4
    SupportEnd of life
    End of support9 Mar 2010
  26. FortiManager3.5
    SupportEnd of life
    End of support11 Jul 2010
  27. FortiManager3.6
    SupportEnd of life
    End of support11 Feb 2011
  28. FortiManager3.7
    SupportEnd of life
    End of support23 Jul 2011
  29. FortiManager4.0
    SupportEnd of life
    End of support12 Mar 2012
  30. FortiManager4.1
    SupportEnd of life
    End of support11 Sept 2012
  31. FortiManager4.2
    SupportEnd of life
    End of support3 Apr 2013
  32. FortiManager4.3
    SupportEnd of life
    End of support30 Jun 2014
  33. FortiManager5.0
    SupportEnd of life
    End of support1 May 2017
  34. FortiManager5.2
    SupportEnd of life
    End of support23 Feb 2019
  35. FortiManager5.4
    SupportEnd of life
    End of support17 Aug 2020
  36. FortiManager5.6
    SupportEnd of life
    End of support27 Jan 2022
  37. FortiManager6.0
    SupportEnd of life
    End of support18 Oct 2022
  38. FortiManager6.2
    SupportEnd of life
    End of support11 Oct 2023
  39. FortiManager6.4
    SupportEnd of life
    End of support9 Oct 2024
  40. FortiManager7.0
    SupportEnd of life
    End of support22 Oct 2025
  41. FortiOS3.3
    SupportEnd of life
    End of support2 Oct 2009
  42. FortiOS3.4
    SupportEnd of life
    End of support29 Dec 2009
  43. FortiOS3.5
    SupportEnd of life
    End of support3 Jul 2010
  44. FortiOS3.6
    SupportEnd of life
    End of support4 Feb 2011
  45. FortiOS3.7
    SupportEnd of life
    End of support18 Jul 2011
  46. FortiOS4.0
    SupportEnd of life
    End of support24 Feb 2012
  47. FortiOS4.1
    SupportEnd of life
    End of support24 Aug 2012
  48. FortiOS4.2
    SupportEnd of life
    End of support1 Apr 2013
  49. FortiOS4.3
    SupportEnd of life
    End of support19 Mar 2014
  50. FortiOS5.0
    SupportEnd of life
    End of support1 May 2017
  51. FortiOS5.2
    SupportEnd of life
    End of support13 Dec 2018
  52. FortiOS5.4
    SupportEnd of life
    End of support21 Jun 2020
  53. FortiOS5.6
    SupportEnd of life
    End of support30 Sept 2021
  54. FortiOS6.0
    SupportEnd of life
    End of support29 Sept 2022
  55. FortiOS6.2
    SupportEnd of life
    End of support28 Sept 2023
  56. FortiOS6.4
    SupportEnd of life
    End of support30 Sept 2024
  57. FortiOS7.0
    SupportEnd of life
    End of support30 Sept 2025
  58. FortiOS7.2
    SupportEnd of life
    End of support30 Sept 2026
  59. FortiProxy1.0
    SupportEnd of life
    End of support11 Oct 2022
  60. FortiProxy1.1
    SupportEnd of life
    End of support22 Jun 2023
  61. FortiProxy1.2
    SupportEnd of life
    End of support30 Jul 2023
  62. FortiProxy2.0
    SupportEnd of life
    End of support15 May 2025
  63. FortiProxy7.0
    SupportEnd of life
    End of support24 Feb 2026
  64. FortiSandbox1.2
    SupportEnd of life
    End of support3 Aug 2018
  65. FortiSandbox1.3
    SupportEnd of life
    End of support25 Dec 2018
  66. FortiSandbox1.4
    SupportEnd of life
    End of support11 Feb 2019
  67. FortiSandbox2.0
    SupportEnd of life
    End of support6 Jul 2019
  68. FortiSandbox2.1
    SupportEnd of life
    End of support13 Jan 2020
  69. FortiSandbox2.2
    SupportEnd of life
    End of support15 Sept 2020
  70. FortiSandbox2.3
    SupportEnd of life
    End of support28 Feb 2021
  71. FortiSandbox2.4
    SupportEnd of life
    End of support3 Nov 2021
  72. FortiSandbox2.5
    SupportEnd of life
    End of support2 May 2022
  73. FortiSandbox3.0
    SupportEnd of life
    End of support31 Jan 2023
  74. FortiSandbox3.1
    SupportEnd of life
    End of support18 Dec 2023
  75. FortiSandbox3.2
    SupportEnd of life
    End of support30 Oct 2024
  76. FortiSandbox4.0
    SupportEnd of life
    End of support19 Oct 2025
  77. FortiSandbox4.2
    SupportEnd of life
    End of support14 Nov 2025
  78. FortiWeb3.1
    SupportEnd of life
    End of support20 Apr 2012
  79. FortiWeb3.2
    SupportEnd of life
    End of support4 Jun 2012
  80. FortiWeb3.3
    SupportEnd of life
    End of support3 Sept 2012
  81. FortiWeb4.0
    SupportEnd of life
    End of support12 Mar 2013
  82. FortiWeb4.1
    SupportEnd of life
    End of support3 Aug 2013
  83. FortiWeb4.2
    SupportEnd of life
    End of support1 Feb 2014
  84. FortiWeb4.3
    SupportEnd of life
    End of support1 Aug 2014
  85. FortiWeb4.4
    SupportEnd of life
    End of support22 Jun 2015
  86. FortiWeb5.0
    SupportEnd of life
    End of support17 Nov 2017
  87. FortiWeb5.1
    SupportEnd of life
    End of support20 Jul 2017
  88. FortiWeb5.2
    SupportEnd of life
    End of support1 Nov 2017
  89. FortiWeb5.3
    SupportEnd of life
    End of support2 Mar 2018
  90. FortiWeb5.4
    SupportEnd of life
    End of support14 Aug 2018
  91. FortiWeb5.5
    SupportEnd of life
    End of support15 Dec 2018
  92. FortiWeb5.6
    SupportEnd of life
    End of support26 Sept 2019
  93. FortiWeb5.7
    SupportEnd of life
    End of support18 Jul 2021
  94. FortiWeb5.8
    SupportEnd of life
    End of support27 Oct 2021
  95. FortiWeb5.9
    SupportEnd of life
    End of support20 Sept 2022
  96. FortiWeb6.0
    SupportEnd of life
    End of support23 Nov 2022
  97. FortiWeb6.1
    SupportEnd of life
    End of support27 Sept 2023
  98. FortiWeb6.2
    SupportEnd of life
    End of support30 Mar 2024
  99. FortiWeb6.3
    SupportEnd of life
    End of support21 Jul 2024
  100. FortiWeb6.4
    SupportEnd of life
    End of support1 Oct 2023
  101. FortiWeb7.0
    SupportEnd of life
    End of support19 Jul 2026

Appliance life cycle

End of sale, end of support and replacement of every Fortinet appliance model (1,054).

Official sources