Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- Medium6.5An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.25%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.31%Oct 13, 2026
- High8.8An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…Check if you run itEPSS 0.32%Oct 13, 2026
- High7.3ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass VulnerabilityOpen the advisoryOct 13, 2026
- Low3.8A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsCheck if you run itEPSS 0.21%Oct 13, 2026
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- UnknownGUI Denial of ServiceOpen the advisoryOct 13, 2026
- Critical9.8Arbitrary file write in grpc phQueryMasterCheck if you run itEPSS 0.43%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouCheck if you run itEPSS 0.24%Oct 13, 2026
- Medium6.1arbitrary command execution in fgfmsd daemonCheck if you run itEPSS 0.71%Oct 13, 2026
- Medium4.9An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allowCheck if you run itEPSS 0.28%Oct 13, 2026
- High8.8SQL command injection in webmailCheck if you run itEPSS 0.30%Oct 13, 2026
- UnknownArbitrary process termination from exposed minifilter communication portCheck if you run itEPSS 0.14%Oct 5, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityPatch nowKEVEPSS 2.20%Oct 1, 2026
- UnknownImproper Authentication of FortiPAM ServerCheck if you run itEPSS 0.38%Sep 17, 2026
- UnknownContent-Encoding WAF EvasionCheck if you run itEPSS 0.31%Sep 15, 2026
- UnknownFortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Sep 11, 2026
- High8.1ZTNA Portal Improper Certificate ValidationCheck if you run itEPSS 0.28%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- UnknownUncontrolled Resource Consumption in SNMPCheck if you run itEPSS 0.41%Sep 8, 2026
- UnknownJWT used for authentication in web GUI signed with static keyCheck if you run itEPSS 0.52%Sep 8, 2026
- UnknownOpen Redirect on FortiSIEMCheck if you run itEPSS 0.22%Sep 8, 2026
- High7.2ZDI-26-645: Fortinet FortiSandbox write_remote_backup_to_crontab cronValue Command Injection Remote Code Execution VulnerabilityCheck if you run itEPSS 1.40%Sep 8, 2026
- UnknownBroken Access control on Websocket streamsCheck if you run itEPSS 0.23%Sep 8, 2026
304 records · page 1 of 13
PreviousNext