Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityKEVEPSS 2.2%Oct 1, 2026
- Low2.7A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versi…Sep 8, 2026
- High8.1A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to inf…Sep 8, 2026
- High8.1A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack…Aug 12, 2026
- Medium5.3A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may al…Aug 12, 2026
- Medium4.1A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…Jul 14, 2026
- Medium5.0A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, Fo…Jul 14, 2026
- Medium5.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…Jul 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 76.1%Jun 9, 2026
- Medium5.3A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions,…EPSS 0.4%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiAP 7.6.0 through 7.6.2, FortiAP 7.4.0 thro…EPSS 0.6%May 12, 2026
- Medium6.7An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP 7.6.0 through 7.…EPSS 0.6%May 12, 2026
- Medium6.5An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro…EPSS 0.4%Apr 14, 2026
- Medium5.4An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0…EPSS 0.3%Apr 14, 2026
- High7.2An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.…EPSS 0.5%Apr 14, 2026
- Medium6.5An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through…EPSS 0.5%Apr 14, 2026
- Medium4.3A server-side request forgery (ssrf) vulnerability [CWE-918] vulnerability in Fortinet FortiSOAR PaaS 7.6.4, FortiSOAR PaaS 7.6.0 through 7.6.2, FortiSOAR PaaS 7.5.0 t…EPSS 0.2%Apr 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityKEVEPSS 47.4%Apr 14, 2026
- Critical9.8Fortinet FortiClient EMS Improper Access Control VulnerabilityKEVEPSS 9.1%Apr 3, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityKEVEPSS 29.5%Feb 10, 2026
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityKEVEPSS 93.9%Feb 6, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityKEVEPSS 85.8%Jan 27, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityKEVEPSS 3.8%Jan 13, 2026
- High7.2A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiExtender 7.6.0 through 7.6.3, FortiExtender 7.4.0 through…EPSS 1.7%Dec 9, 2025
- Medium5.6An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all…EPSS 0.3%Dec 9, 2025
52 records · page 1 of 3
PreviousNext