Fortinet
Fortinet PSIRT and related public records for Forti products.
119 public records currently classified under this stack.
Known exploited
All KEV for Fortinet- Critical9.8Fortinet FortiOS SSL VPN Path Traversal VulnerabilityKEVEPSS 100.0%Jun 4, 2019
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityKEVEPSS 100.0%Oct 11, 2022
- Critical9.8Fortinet FortiWeb SQL Injection VulnerabilityKEVEPSS 99.8%Jul 17, 2025
- Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityKEVEPSS 99.5%Dec 13, 2022
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityKEVEPSS 98.4%Mar 12, 2024
- Critical9.8Fortinet FortiManager Missing Authentication VulnerabilityKEVEPSS 94.8%Oct 23, 2024
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityKEVEPSS 94.1%Jan 14, 2025
- Critical9.8Fortinet FortiClient EMS SQL Injection VulnerabilityKEVEPSS 93.9%Feb 6, 2026
Recent Fortinet findings
Full list- High7.3ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass VulnerabilityOct 14, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…EPSS 0.3%Oct 13, 2026
- Medium6.5An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…EPSS 0.3%Oct 13, 2026
- High7.2An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.…EPSS 0.3%Oct 13, 2026
- Low3.8A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requestsEPSS 0.2%Oct 13, 2026
- Low2.3A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 throu…EPSS 0.1%Oct 13, 2026
- Critical9.8A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized c…EPSS 0.4%Oct 13, 2026
- Medium5.3A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox ClouEPSS 0.2%Oct 13, 2026
- Medium6.1A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7…EPSS 0.7%Oct 13, 2026
- Medium4.9An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allowEPSS 0.3%Oct 13, 2026