Fortinet vulnerabilities
71 advisories tracked, 21 actively exploited. Last update: October 26, 2026.
By product: FortiOS / FortiGate (26) · FortiProxy (16) · FortiSwitch / FortiSwitchManager (6) · FortiPAM (7) · FortiSandbox (9) · FortiSIEM (6) · FortiManager (7) · FortiAnalyzer (4) · FortiMail (3) · FortiSOAR (1) · FortiClient / EMS (6) · FortiWeb (7) · FortiAuthenticator (1) · FortiPortal (1) · FortiVoice / FortiFone (1)
Running Fortinet devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on Fortinet alerts
Turn on Fortinet alerts
- Fortinet: Node2Shell CVEs
- Fortinet: PHP2Shell core RCE vulnerability patches (CVE-2026-109618 and CVE-2026-109619)
- Fortinet Multiple Products Path Traversal Vulnerability
- Fortinet: Improper access control and session management in the web management interface
- Fortinet: Arbitrary file write in grpc phQueryMaster
- Fortinet: Multiple Arbitrary File Read/Write via SQL Injection
- Fortinet: SQL command injection in webmail
- Fortinet: GUI Denial of Service
- Fortinet: arbitrary command execution in fgfmsd daemon
- Fortinet: Fabric API Authentication bypass
- Fortinet: Persistent Denial of Service in Admin Profile
- Fortinet: Broken authorization
- Fortinet: Double free in signal handler
- Fortinet FortiMail Path Traversal Vulnerability
- Fortinet: Improper limitation of a pathname to a restricted directory
- Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
- Fortinet: Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
- Fortinet: JWT used for authentication in web GUI signed with static key
- Fortinet: Improper Authentication of FortiPAM Server
- Fortinet: ZTNA Portal Improper Certificate Validation
- Fortinet: Cron Job Injection in Remote Backup
- Fortinet: Uncontrolled Resource Consumption in SNMP
- Fortinet: Broken Access control on Websocket streams
- Fortinet: Arbitrary process termination from exposed minifilter communication port
- Fortinet: Workflow session email approval process bypass
- Fortinet: Open Redirect on FortiSIEM
- Fortinet: Null Pointer Dereference in Log Report
- Fortinet: Broken access control in the RADIUS type admin group
- Fortinet: FGFM Authentication Weakening via CLI Configuration
- Fortinet: Heap overflow in kernel driver due to missing size validation
- Fortinet: HTTP/2 Bomb CVE-2026-49975
- Fortinet: Stack buffer overflow in WAD
- Fortinet: Content-Encoding WAF Evasion
- Fortinet: UI DoS attack
- Fortinet: Server-Side Request Forgery (SSRF)
- Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Fortinet FortiSandbox OS Command Injection Vulnerability
- Fortinet FortiSandbox OS Command Injection Vulnerability
- Fortinet: Unauthenticated VNC access exposed on all interfaces
- Fortinet: Missed certificate verification in AD Connector communication with FortiClient EMS
- Fortinet: Out of bounds read in GUI
- Fortinet: Supers override fails to properly override supervisor address
- Fortinet: SSL-VPN Reflected XSS
- Fortinet: Cross-Site Scripting in Domain parameter
- Fortinet: Stack Buffer Overflow in Log Report
- Fortinet: Path traversal in CLI command allows deletion of root file system
- Fortinet: Buffer overread in authd and wad daemon
- Fortinet: Header injection in Web Filter warning page
- Fortinet: Header injection in captive portal authentication form
- Fortinet: Second-Order OS Command Injection via JSON Input on start vnc feature
- Fortinet: Restricted CLI escape using Lua
- Fortinet: Improper access control in API endpoints
- Fortinet FortiClient EMS SQL Injection Vulnerability
- Fortinet FortiClient EMS Improper Access Control Vulnerability
- Fortinet: LDAP authentication bypass in Agentless VPN and FSSO
- Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
- Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
- Fortinet FortiWeb OS Command Injection Vulnerability
- Fortinet FortiWeb Path Traversal Vulnerability
- Fortinet FortiWeb SQL Injection Vulnerability
- Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
- Fortinet: Information Disclosure on SSLVPN endpoint
- Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
- Fortinet FortiManager Missing Authentication Vulnerability
- Fortinet Multiple Products Format String Vulnerability
- Fortinet FortiClient EMS SQL Injection Vulnerability
- Fortinet FortiOS Out-of-Bound Write Vulnerability
- Fortinet: Vulnerability in OpenSSL library
- Fortinet: HTML injection in WebUI