Vulnerability index

Browse CVEs

958 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Fortisandbox MEDIUM 6.7
CVE-2026-25691

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSan…

Fix: 4.4.9 / 5.0.6+
Fix from $1,600 2026-04-14
Fortisoar HIGH 7.5
CVE-2026-22155

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, F…

Fix: 7.5.3 / 7.6.4+
Fix from $1,950 2026-04-14
Fortisoar MEDIUM 6.5
CVE-2026-22573

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, Forti…

Fix: after 7.6.3
Fix from $1,600 2026-04-14
Fortisoar MEDIUM 6.5
CVE-2026-22574

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSO…

Fix: 7.5.3 / 7.6.5+
Fix from $1,600 2026-04-14
Fortisoar MEDIUM 6.5
CVE-2026-22576

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSO…

Fix: 7.5.3 / 7.6.5+
Fix from $1,600 2026-04-14
Fortisoar MEDIUM 5.4
CVE-2026-22154

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3,…

Fix: 7.5.3 / 7.6.4+
Fix from $1,600 2026-04-14
Fortisoar MEDIUM 6.5
CVE-2026-21742

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, F…

Fix: 7.5.3 / 7.6.4+
Fix from $1,600 2026-04-14
Fortimanager Cloud MEDIUM 6.5
CVE-2025-68649

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiA…

Fix: 7.4.8 / 7.6.5+
Fix from $1,600 2026-04-14
Fortianalyzer HIGH 7.2
CVE-2025-61848

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, …

Fix: 7.4.9 / 7.6.5+
Fix from $1,950 2026-04-14
Fortios MEDIUM 6.5
CVE-2025-61624

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, For…

Fix: 1.7.1 / 7.0.7+
Fix from $1,600 2026-04-14
Fortisandbox MEDIUM 5.4
CVE-2025-61886

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox…

Fix: 5.0.5+
Fix from $1,600 2026-04-14
Fortios HIGH 8.8
CVE-2025-53847

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 thro…

Fix: 7.0.18 / 7.2.12+
Fix from $1,950 2026-04-14
Forticlientems CRITICAL 9.8
CVE-2026-35616 KEVEPSS 91%

A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized …

Patch available
Fix from $2,300 2026-04-04
Fortiweb MEDIUM 6.6
CVE-2026-30897

A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, Fo…

Fix: 7.4.12 / 7.6.7+
Fix from $1,600 2026-03-10
Fortisandbox Cloud HIGH 7.2
CVE-2026-25836

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, For…

Mitigation only
Fix from $1,950 2026-03-10
Fortisiem MEDIUM 6.1
CVE-2026-25972

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 th…

Fix: 7.3.5+
Fix from $1,600 2026-03-10
Fortideceptor MEDIUM 6.5
CVE-2026-25689

An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.…

Fix: after 6.0.3
Fix from $1,600 2026-03-10
Fortiweb MEDIUM 6.6
CVE-2026-24640

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb …

Fix: 7.6.7 / 8.0.3+
Fix from $1,600 2026-03-10
Fortiweb MEDIUM 6.5
CVE-2026-24641

A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4…

Fix: 7.6.7 / 8.0.3+
Fix from $1,600 2026-03-10
Fortiweb HIGH 8.1
CVE-2026-24017

An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7…

Fix: 7.0.12 / 7.2.12+
Fix from $1,950 2026-03-10
Forticlient HIGH 7.8
CVE-2026-24018

A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may al…

Fix: 7.2.13 / 7.4.5+
Fix from $1,950 2026-03-10
Fortiswitchaxfixed HIGH 8.8
CVE-2026-22627

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow a…

Fix: 1.0.2+
Fix from $1,950 2026-03-10
Fortianalyzer HIGH 7.2
CVE-2026-22572

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through …

Fix: 7.4.8 / 7.6.4+
Fix from $1,950 2026-03-10
Fortiswitchaxfixed MEDIUM 6.7
CVE-2026-22628

An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system comman…

Fix: 1.0.2+
Fix from $1,600 2026-03-10
Fortianalyzer HIGH 7.2
CVE-2025-68648

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAna…

Fix: 7.4.8 / 7.6.5+
Fix from $1,950 2026-03-10
Fortiweb HIGH 7.2
CVE-2025-66178

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, …

Fix: 7.0.13 / 7.2.13+
Fix from $1,950 2026-03-10
Fortimanager MEDIUM 5.9
CVE-2025-68482

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 a…

Fix: 7.4.9 / 7.6.5+
Fix from $1,600 2026-03-10
Fortimanager HIGH 8.1
CVE-2025-54820

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, …

Fix: 7.2.11 / 7.4.3+
Fix from $1,950 2026-03-10
Fortisoar Agent Communication Bridge HIGH 7.5
CVE-2025-54659

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Co…

Mitigation only
Fix from $1,950 2026-03-10
Fortianalyzer HIGH 7.2
CVE-2025-49784

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, …

Fix: 7.4.5 / 7.4.8+
Fix from $1,950 2026-03-10