CVE Program partner

fortinet

Fortinet, Inc.

API
CVEs, 365 days1581,973 all time, 923 rejected
Quality100%median 99%
CVSS by the CNA100%share of records
CWE100%share of records
Affected versions100%not n/a or unspecified
CVSS added by CISA0%lower is better
OrganisationFortinet, Inc.
RoleCNA
TypeVendor
Reports tomitre
ScopeFortinet issues only.
Advisorieshttps://www.fortiguard.com/psirt

Latest CVEs · RSS

  • CVE-2026-106175 2026-10-13 · CVSS 2.1
    A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.
  • CVE-2026-106172 2026-10-13 · CVSS 4.9
    A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all version
  • CVE-2026-23707 2026-10-13 · CVSS 6.5
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 thr
  • CVE-2026-23706 2026-10-13 · CVSS 5.9
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 thr
  • CVE-2026-23705 2026-10-13 · CVSS 6.5
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 thr
  • CVE-2025-46773 2026-10-13 · CVSS 7.9
    An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 thr
  • CVE-2025-57739 2026-10-13 · CVSS 7.7
    An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through
  • CVE-2026-106170 2026-10-13 · CVSS 4.8
    An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all
  • CVE-2026-106173 2026-10-13 · CVSS 9.4
    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unautho
  • CVE-2026-106176 2026-10-13 · CVSS 3.4
    A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP request
  • CVE-2026-106171 2026-10-13 · CVSS 5.3
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 th
  • CVE-2026-104286 2026-10-01 · CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 throu
  • CVE-2026-84388 2026-09-22 · CVSS 9.1
    A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all v
  • CVE-2026-84390 2026-09-11 · CVSS 9.6
    A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.2.4 through 7.2.7, FortiMonitorOnSight 7.2.0 through 7.2.2 m
  • CVE-2026-84392 2026-09-08 · CVSS 2.5
    A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 al
  • CVE-2026-22575 2026-09-08 · CVSS 4.7
    An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions, FortiMa
  • CVE-2026-84391 2026-09-08 · CVSS 5.9
    A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector he
  • CVE-2026-84393 2026-09-08 · CVSS 7.3
    A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker
  • CVE-2026-26084 2026-09-08 · CVSS 8.9
    A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.4 through 5.0.5,
  • CVE-2026-84385 2026-09-08 · CVSS 4.9
    A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR PaaS 7.5.0 through 7.5.3, FortiSOAR PaaS 7.4 all versions, For
  • CVE-2026-84389 2026-09-08 · CVSS 2.8
    A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 through 7.5.1, FortiSIEM 7.4.1 through 7.4.2 may allow attacker
  • CVE-2026-84387 2026-09-08 · CVSS 6.7
    A improper neutralization of special elements used in a command ('command injection') vulnerability in Fortinet FortiSandbox 5.2.0, FortiSandbox 5.0.0 through 5
  • CVE-2026-84386 2026-09-08 · CVSS 4.7
    A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper acce
  • CVE-2026-70468 2026-08-12 · CVSS 7.3
    A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 th
  • CVE-2026-26035 2026-08-12 · CVSS 8.8
    An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through

All CVE Program partners