Security Digest
Fortinet: known exploited vulnerabilities
21 Fortinet CVEs CISA has confirmed as exploited in the wild since October 2023. If you run these products, check each one.
| Added | CVE | Product and flaw | CISA due |
|---|---|---|---|
| 2026-10-16 | CVE-2025-61624 | Fortinet Multiple Products Fortinet Multiple Products Path Traversal Vulnerability | 2026-10-19 |
| 2026-10-01 | CVE-2026-104286 | Fortinet FortiMail Fortinet FortiMail Path Traversal Vulnerability | 2026-10-04 |
| 2026-09-09 | CVE-2025-25249 | Fortinet Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 2026-09-12 |
| 2026-07-27 | CVE-2025-68686 | Fortinet FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-08-10 |
| 2026-07-16 | CVE-2026-39808 | Fortinet FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-19 |
| 2026-07-16 | CVE-2026-25089 | Fortinet FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-19 |
| 2026-04-13 | CVE-2026-21643 | Fortinet FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability | 2026-04-16 |
| 2026-04-06 | CVE-2026-35616 | Fortinet FortiClient EMS Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-09 |
| 2026-01-27 | CVE-2026-24858 | Fortinet Multiple Products Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-30 |
| 2025-12-16 | CVE-2025-59718 | Fortinet Multiple Products Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 2025-12-23 |
| 2025-11-18 | CVE-2025-58034 | Fortinet FortiWeb Fortinet FortiWeb OS Command Injection Vulnerability | 2025-11-25 |
| 2025-11-14 | CVE-2025-64446 | Fortinet FortiWeb Fortinet FortiWeb Path Traversal Vulnerability | 2025-11-21 |
| 2025-07-18 | CVE-2025-25257 | Fortinet FortiWeb Fortinet FortiWeb SQL Injection Vulnerability | 2025-08-08 |
| 2025-06-25 | CVE-2019-6693 | Fortinet FortiOS Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Ransomware | 2025-07-16 |
| 2025-05-14 | CVE-2025-32756 | Fortinet Multiple Products Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 2025-06-04 |
| 2025-03-18 | CVE-2025-24472 | Fortinet FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Ransomware | 2025-04-08 |
| 2025-01-14 | CVE-2024-55591 | Fortinet FortiOS and FortiProxy Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Ransomware | 2025-01-21 |
| 2024-10-23 | CVE-2024-47575 | Fortinet FortiManager Fortinet FortiManager Missing Authentication Vulnerability | 2024-11-13 |
| 2024-10-09 | CVE-2024-23113 | Fortinet Multiple Products Fortinet Multiple Products Format String Vulnerability | 2024-10-30 |
| 2024-03-25 | CVE-2023-48788 | Fortinet FortiClient EMS Fortinet FortiClient EMS SQL Injection Vulnerability Ransomware | 2024-04-15 |
| 2024-02-09 | CVE-2024-21762 | Fortinet FortiOS Fortinet FortiOS Out-of-Bound Write Vulnerability Ransomware | 2024-02-16 |