Fortinet FortiProxy vulnerabilities

16 advisories, 6 actively exploited. Last update: October 16, 2026.

• CVE-2025-61624October 16, 2026Medium 6Exploited
  Fortinet Multiple Products Path Traversal Vulnerability
• FG-IR-26-182October 13, 2026Low 2.1
  Fortinet: Double free in signal handler
• FG-IR-26-174September 8, 2026High 8.1
  Fortinet: ZTNA Portal Improper Certificate Validation
• FG-IR-26-173September 8, 2026Low 2.5
  Fortinet: Null Pointer Dereference in Log Report
• FG-IR-26-150July 14, 2026Medium 6.1
  Fortinet: SSL-VPN Reflected XSS
• FG-IR-26-148July 14, 2026Medium 5.9
  Fortinet: Stack Buffer Overflow in Log Report
• FG-IR-26-151July 14, 2026Medium 5.5
  Fortinet: Path traversal in CLI command allows deletion of root file system
• FG-IR-26-154July 14, 2026Medium 4.3
  Fortinet: Buffer overread in authd and wad daemon
• FG-IR-26-152July 14, 2026Low 3.4
  Fortinet: Header injection in Web Filter warning page
• FG-IR-26-153July 14, 2026Low 3.1
  Fortinet: Header injection in captive portal authentication form
• FG-IR-26-143June 9, 2026Medium 6.7
  Fortinet: Restricted CLI escape using Lua
• CVE-2026-24858January 27, 2026Critical 9.8Exploited
  Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
• CVE-2025-59718December 16, 2025Critical 9.8Exploited
  Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
• CVE-2025-24472March 18, 2025High 8.1Exploited
  Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
• CVE-2024-55591January 14, 2025Critical 9.8Exploited
  Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
• CVE-2024-23113October 9, 2024Critical 9.8Exploited
  Fortinet Multiple Products Format String Vulnerability