---
title: "Fortinet: known exploited vulnerabilities"
url: https://erroneo.us/security/vendor/fortinet/
description: "Every Fortinet vulnerability in CISA's Known Exploited Vulnerabilities catalog since October 2023 (21), newest first, with due dates and fixes."
type: vendor
section: "Security Digest"
date_modified: 2026-10-16
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Fortinet: known exploited vulnerabilities

- 2026-10-16 [CVE-2025-61624](https://erroneo.us/security/cve/CVE-2025-61624/index.md) Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability (due 2026-10-19; ransomware: Unknown)
- 2026-10-01 [CVE-2026-104286](https://erroneo.us/security/cve/CVE-2026-104286/index.md) Fortinet FortiMail: Fortinet FortiMail Path Traversal Vulnerability (due 2026-10-04; ransomware: Unknown)
- 2026-09-09 [CVE-2025-25249](https://erroneo.us/security/cve/CVE-2025-25249/index.md) Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability (due 2026-09-12; ransomware: Unknown)
- 2026-07-27 [CVE-2025-68686](https://erroneo.us/security/cve/CVE-2025-68686/index.md) Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (due 2026-08-10; ransomware: Unknown)
- 2026-07-16 [CVE-2026-39808](https://erroneo.us/security/cve/CVE-2026-39808/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (due 2026-07-19; ransomware: Unknown)
- 2026-07-16 [CVE-2026-25089](https://erroneo.us/security/cve/CVE-2026-25089/index.md) Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability (due 2026-07-19; ransomware: Unknown)
- 2026-04-13 [CVE-2026-21643](https://erroneo.us/security/cve/CVE-2026-21643/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability (due 2026-04-16; ransomware: Unknown)
- 2026-04-06 [CVE-2026-35616](https://erroneo.us/security/cve/CVE-2026-35616/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS Improper Access Control Vulnerability (due 2026-04-09; ransomware: Unknown)
- 2026-01-27 [CVE-2026-24858](https://erroneo.us/security/cve/CVE-2026-24858/index.md) Fortinet Multiple Products: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability (due 2026-01-30; ransomware: Unknown)
- 2025-12-16 [CVE-2025-59718](https://erroneo.us/security/cve/CVE-2025-59718/index.md) Fortinet Multiple Products: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability (due 2025-12-23; ransomware: Unknown)
- 2025-11-18 [CVE-2025-58034](https://erroneo.us/security/cve/CVE-2025-58034/index.md) Fortinet FortiWeb: Fortinet FortiWeb OS Command Injection Vulnerability (due 2025-11-25; ransomware: Unknown)
- 2025-11-14 [CVE-2025-64446](https://erroneo.us/security/cve/CVE-2025-64446/index.md) Fortinet FortiWeb: Fortinet FortiWeb Path Traversal Vulnerability (due 2025-11-21; ransomware: Unknown)
- 2025-07-18 [CVE-2025-25257](https://erroneo.us/security/cve/CVE-2025-25257/index.md) Fortinet FortiWeb: Fortinet FortiWeb SQL Injection Vulnerability (due 2025-08-08; ransomware: Unknown)
- 2025-06-25 [CVE-2019-6693](https://erroneo.us/security/cve/CVE-2019-6693/index.md) Fortinet FortiOS: Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability (due 2025-07-16; ransomware: Known)
- 2025-05-14 [CVE-2025-32756](https://erroneo.us/security/cve/CVE-2025-32756/index.md) Fortinet Multiple Products: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability (due 2025-06-04; ransomware: Unknown)
- 2025-03-18 [CVE-2025-24472](https://erroneo.us/security/cve/CVE-2025-24472/index.md) Fortinet FortiOS and FortiProxy: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (due 2025-04-08; ransomware: Known)
- 2025-01-14 [CVE-2024-55591](https://erroneo.us/security/cve/CVE-2024-55591/index.md) Fortinet FortiOS and FortiProxy: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability (due 2025-01-21; ransomware: Known)
- 2024-10-23 [CVE-2024-47575](https://erroneo.us/security/cve/CVE-2024-47575/index.md) Fortinet FortiManager: Fortinet FortiManager Missing Authentication Vulnerability (due 2024-11-13; ransomware: Unknown)
- 2024-10-09 [CVE-2024-23113](https://erroneo.us/security/cve/CVE-2024-23113/index.md) Fortinet Multiple Products: Fortinet Multiple Products Format String Vulnerability (due 2024-10-30; ransomware: Unknown)
- 2024-03-25 [CVE-2023-48788](https://erroneo.us/security/cve/CVE-2023-48788/index.md) Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability (due 2024-04-15; ransomware: Known)
- 2024-02-09 [CVE-2024-21762](https://erroneo.us/security/cve/CVE-2024-21762/index.md) Fortinet FortiOS: Fortinet FortiOS Out-of-Bound Write Vulnerability (due 2024-02-16; ransomware: Known)

---
Source page: https://erroneo.us/security/vendor/fortinet/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt