FortiOS / FortiGate 6.4 vulnerabilities

5 advisories affect Fortinet FortiOS / FortiGate 6.4, 3 already exploited by attackers. Latest: October 16, 2026.

Running FortiOS / FortiGate 6.4 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiOS / FortiGate 6.4 alerts

Vulnerability	Severity	Affected versions
Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · October 16, 2026	Medium 6 Exploited	from 6.4.0 to 6.4.16
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2025-68686 · July 27, 2026	Medium 5.9 Exploited	from 6.4.0 to 6.4.16
Fortinet: Path traversal in CLI command allows deletion of root file system FG-IR-26-151 · July 14, 2026	Medium 5.5	all versions 6.4
Fortinet: Buffer overread in authd and wad daemon FG-IR-26-154 · July 14, 2026	Medium 4.3	all versions 6.4
Fortinet FortiOS Out-of-Bound Write Vulnerability CVE-2024-21762 · February 9, 2024	Critical 9.8 Exploited	from 6.4.0 to 6.4.14

Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.

Other FortiOS / FortiGate versions: 7.6 · 7.4 · 7.2 · 7.0 · 6.2 · 6.0