Fortinet FortiManager vulnerabilities

7 advisories, 2 actively exploited. Last update: October 13, 2026.

Running FortiManager devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiManager alerts

FG-IR-26-178October 13, 2026High 7.9
Fortinet: Multiple Arbitrary File Read/Write via SQL Injection
FG-IR-26-177October 13, 2026Medium 5.3
Fortinet: arbitrary command execution in fgfmsd daemon
FG-IR-26-171September 8, 2026Medium 4.9
Fortinet: Workflow session email approval process bypass
FG-IR-26-160August 12, 2026High 8.1
Fortinet: FGFM Authentication Weakening via CLI Configuration
CVE-2026-24858January 27, 2026Critical 9.8Exploited
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2024-47575October 23, 2024Critical 9.8Exploited
Fortinet FortiManager Missing Authentication Vulnerability
FG-IR-20-005September 21, 2020Medium 4.9
Fortinet: HTML injection in WebUI