Fortinet Vulnerabilities and Affected Products

Open in search

Explore source-attributed vulnerabilities associated with Fortinet products.

Products

Showing 25 vulnerabilities on this page

Signals CISA KEV Ransomware Nuclei
VulnerabilityTitle and contextCVSSEPSSPoCsSignals

Fortinet FortiManager and FortiManager Cloud Authentication Bypass Using an Alternate Path or Channel

A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.2.5 through 7.2.9 may allow attacker to improper access control via <insert attack vector here>

CWE-288Aug 12, 2026
CVSS7.3v3.1EPSS0.587%PoCs0SignalsSTIX

Fortinet FortiWeb Improper Authentication Vulnerability

An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password

CWE-287Aug 12, 2026
CVSS8.8v3.1EPSS0.51%PoCs0SignalsSTIX

Fortinet FortiWeb Incomplete List of Disallowed Inputs Leading to Improper Access Control

A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

CWE-184Aug 12, 2026
CVSS4.8v3.1EPSS0.309%PoCs0SignalsSTIX

Fortinet FortiOS Stack-based Buffer Overflow in WAD Daemon via Crafted Sockets

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled.

CWE-121Aug 12, 2026
CVSS5.1v3.1EPSS0.494%PoCs0SignalsSTIX

Fortinet FortiSIEM Server-Side Request Forgery

A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CWE-918Aug 12, 2026
CVSS3.4v3.1EPSS0.257%PoCs0SignalsSTIX

Fortinet FortiOS Allocation of Resources Without Limits or Throttling Denial of Service

A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>

CWE-770Aug 12, 2026
CVSS5.0v3.1EPSS0.556%PoCs0SignalsSTIX

Fortinet FortiClientWindows Classic Buffer Overflow Remote Code Execution

A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets.

CWE-120Aug 12, 2026
CVSS7.3v3.1EPSS0.548%PoCs0SignalsSTIX

Fortinet FortiSIEM Basic Cross-Site Scripting Vulnerability

A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.2.0 through 7.2.6, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7 all versions, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>

CWE-80Jul 15, 2026
CVSS5.3v3.1EPSS0.143%PoCs0SignalsSTIX

Fortinet FortiOS, FortiProxy, FortiSwitchManager, and FortiPAM Buffer Over-read Information Disclosure

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>

CWE-126Jul 14, 2026
CVSS4.1v3.1EPSS0.187%PoCs0SignalsSTIX

Fortinet FortiOS Buffer Over-read Information Disclosure Vulnerability

A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a portion of device memory in the redirect response via submitting a specially crafted request.

CWE-126Jul 14, 2026
CVSS4.1v3.1EPSS0.336%PoCs0SignalsSTIX

Fortinet FortiOS, FortiProxy, and FortiPAM Cross-Site Scripting

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.3, FortiProxy 7.2.0 t…

CWE-79Jul 14, 2026
CVSS6.1v3.1EPSS0.313%PoCs0SignalsSTIX

Fortinet FortiOS, FortiPAM, and FortiProxy Path Traversal Vulnerability

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 throu…

CWE-22Jul 14, 2026
CVSS5.0v3.1EPSS0.225%PoCs0SignalsSTIX

Fortinet FortiOS, FortiProxy, and FortiPAM HTTP Response Splitting Vulnerability

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker able to intercept and modify a user's captive portal authentication request to inject arbitrary headers via crafted HTTP requests.

CWE-113Jul 14, 2026
CVSS3.1v3.1EPSS0.289%PoCs0SignalsSTIX

FortiOS and FortiProxy HTTP Response Splitting via Web Filter Override Token

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a crafted link.

CWE-113Jul 14, 2026
CVSS3.4v3.1EPSS0.267%PoCs0SignalsSTIX

Fortinet FortiClientEMS Improper Certificate Validation Information Disclosure Vulnerability

A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, FortiClientEMS 7.4.0 through 7.4.1, FortiClientEMS 7.2 all versions may allow attacker to information disclosure via <insert attack vector here>

CWE-295Jul 14, 2026
CVSS6.7v3.1EPSS0.126%PoCs0SignalsSTIX

Fortinet FortiSIEMWindowsAgent Improper Restriction of Communication Channel to Intended Endpoints Privilege Escalation

A improper restriction of communication channel to intended endpoints vulnerability in Fortinet FortiSIEMWindowsAgent 7.4.0 through 7.4.1 may allow attacker to escalation of privilege via <insert attack vector here>

CWE-923Jul 14, 2026
CVSS6.9v3.1EPSS0.147%PoCs0SignalsSTIX

Fortinet FortiAuthenticator Out-of-Bounds Read Information Disclosure

A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated attacker to retrieve sensitive information via a specially crafted request.

CWE-125Jul 14, 2026
CVSS7.0v3.1EPSS0.385%PoCs0SignalsSTIX

Fortinet FortiSandbox Exposure of Resource to Wrong Sphere VNC Server Access

A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, FortiSandbox 4.4.3 through 4.4.8 may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests.

CWE-668Jul 14, 2026
CVSS7.7v3.1EPSS0.46%PoCs0SignalsSTIX

Fortinet FortiOS, FortiPAM, and FortiProxy Stack-Based Buffer Overflow

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions may allow a privileged authenticated attacker who can bypass stack protection and …

CWE-121Jul 14, 2026
CVSS5.9v3.1EPSS0.707%PoCs0SignalsSTIX

FortiOS and FortiProxy Authenticated Lua Script Execution via Unsafe Debug Access

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

CWE-1244Jun 9, 2026
CVSS6.0v3.1EPSS0.149%PoCs0SignalsSTIX

Fortinet FortiSandbox OS Command Injection Vulnerability

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox 4.2 all versions, FortiSandbox Cloud 5.0.4 through 5.0.5, FortiSandbox PaaS 5.0.4 through 5.0.5 may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests

CWE-78Jun 9, 2026
CVSS9.1v3.1EPSS73.6%PoCs2SignalsSTIX

Fortinet FortiPortal Improper Access Control Vulnerability

A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2.0 through 7.2.8, FortiPortal 7.0 all versions may allow attacker to improper access control via <insert attack vector here>

CWE-284Jun 9, 2026
CVSS6.2v3.1EPSS0.201%PoCs0SignalsSTIX

Fortinet FortiAP and FortiAP-W2 OS Command Injection

An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions may allow an authenticated attacker to execute unauthorized code or commands via a specifically crafted cli command.

CWE-78May 12, 2026
CVSS6.5v3.1EPSS0.561%PoCs0SignalsSTIX

Fortinet FortiAP, FortiAP-U, and FortiAP-W2 OS Command Injection

An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 through 7.4.5, FortiAP 7.2 all versions, FortiAP 7.0 all versions, FortiAP 6.4 all versions, FortiAP-U 7.0.0 through 7.0.5, FortiAP-U 6.2 all versions, FortiAP-W2 7.4.0 through 7.4.4, FortiAP-W2 7.2 all versions, FortiAP-W2 7.0 all versions allows an authenticated privileged attacker to execute unauthorized code …

CWE-78May 12, 2026
CVSS6.1v3.1EPSS0.561%PoCs0SignalsSTIX

Fortinet FortiAnalyzer and FortiManager Use of Potentially Dangerous Function Denial of Service

A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests caus…

CWE-676May 12, 2026
CVSS5.2v3.1EPSS0.424%PoCs0SignalsSTIX