Browse CVEs

MEDIUM 6.7 CVE-2026-25691 A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSan… Fortisandbox 4.4.9 / 5.0.6+ Fix from $1,6002026-04-14 HIGH 7.5 CVE-2026-22155 A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, F… Fortisoar 7.5.3 / 7.6.4+ Fix from $1,9502026-04-14 MEDIUM 6.5 CVE-2026-22573 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, Forti… Fortisoar after 7.6.3 Fix from $1,6002026-04-14 MEDIUM 6.5 CVE-2026-22574 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSO… Fortisoar 7.5.3 / 7.6.5+ Fix from $1,6002026-04-14 MEDIUM 6.5 CVE-2026-22576 A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSO… Fortisoar 7.5.3 / 7.6.5+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2026-22154 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3,… Fortisoar 7.5.3 / 7.6.4+ Fix from $1,6002026-04-14 MEDIUM 6.5 CVE-2026-21742 A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, F… Fortisoar 7.5.3 / 7.6.4+ Fix from $1,6002026-04-14 MEDIUM 6.5 CVE-2025-68649 An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiA… Fortimanager Cloud 7.4.8 / 7.6.5+ Fix from $1,6002026-04-14 HIGH 7.2 CVE-2025-61848 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, … Fortianalyzer 7.4.9 / 7.6.5+ Fix from $1,9502026-04-14 MEDIUM 6.5 CVE-2025-61624 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, For… Fortios 1.7.1 / 7.0.7+ Fix from $1,6002026-04-14 MEDIUM 5.4 CVE-2025-61886 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox… Fortisandbox 5.0.5+ Fix from $1,6002026-04-14 HIGH 8.8 CVE-2025-53847 A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 thro… Fortios 7.0.18 / 7.2.12+ Fix from $1,9502026-04-14 CRITICAL 9.8 CVE-2026-35616 KEVEPSS 91% A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized … Forticlientems Patch available Fix from $2,3002026-04-04 MEDIUM 6.6 CVE-2026-30897 A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, Fo… Fortiweb 7.4.12 / 7.6.7+ Fix from $1,6002026-03-10 HIGH 7.2 CVE-2026-25836 An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox Cloud 5.0.4, For… Fortisandbox Cloud Mitigation only Fix from $1,9502026-03-10 MEDIUM 6.1 CVE-2026-25972 An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 th… Fortisiem 7.3.5+ Fix from $1,6002026-03-10 MEDIUM 6.5 CVE-2026-25689 An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.2.0, FortiDeceptor 6.… Fortideceptor after 6.0.3 Fix from $1,6002026-03-10 MEDIUM 6.6 CVE-2026-24640 A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb … Fortiweb 7.6.7 / 8.0.3+ Fix from $1,6002026-03-10 MEDIUM 6.5 CVE-2026-24641 A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4… Fortiweb 7.6.7 / 8.0.3+ Fix from $1,6002026-03-10 HIGH 8.1 CVE-2026-24017 An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7… Fortiweb 7.0.12 / 7.2.12+ Fix from $1,9502026-03-10 HIGH 7.8 CVE-2026-24018 A UNIX symbolic link (Symlink) following vulnerability in Fortinet FortiClientLinux 7.4.0 through 7.4.4, FortiClientLinux 7.2.2 through 7.2.12 may al… Forticlient 7.2.13 / 7.4.5+ Fix from $1,9502026-03-10 HIGH 8.8 CVE-2026-22627 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow a… Fortiswitchaxfixed 1.0.2+ Fix from $1,9502026-03-10 HIGH 7.2 CVE-2026-22572 An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through … Fortianalyzer 7.4.8 / 7.6.4+ Fix from $1,9502026-03-10 MEDIUM 6.7 CVE-2026-22628 An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system comman… Fortiswitchaxfixed 1.0.2+ Fix from $1,6002026-03-10 HIGH 7.2 CVE-2025-68648 A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAna… Fortianalyzer 7.4.8 / 7.6.5+ Fix from $1,9502026-03-10 HIGH 7.2 CVE-2025-66178 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, … Fortiweb 7.0.13 / 7.2.13+ Fix from $1,9502026-03-10 MEDIUM 5.9 CVE-2025-68482 A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 a… Fortimanager 7.4.9 / 7.6.5+ Fix from $1,6002026-03-10 HIGH 8.1 CVE-2025-54820 A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, … Fortimanager 7.2.11 / 7.4.3+ Fix from $1,9502026-03-10 HIGH 7.5 CVE-2025-54659 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] vulnerability in Fortinet FortiSOAR Agent Co… Fortisoar Agent Communication Bridge Mitigation only Fix from $1,9502026-03-10 HIGH 7.2 CVE-2025-49784 An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, … Fortianalyzer 7.4.5 / 7.4.8+ Fix from $1,9502026-03-10