Latest vulnerabilities for "fortinet fortianalyzer"

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Risk 32

Severity

5.3

First published (updated )

CVE-2025-67604

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Risk 32

Severity

5.2

First published (updated )

Advisory

FG-IR-26-137

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Risk 66

Severity

7.2

First published (updated )

CVE-2025-61848

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-26-111

Fortinet FortiAnalyzerPath Traversal in CLI

Risk 43

Severity

5.4

First published (updated )

Advisory

FG-IR-26-120

Fortinet FortiAnalyzerPath Traversal in CLI

Risk 49

Severity

6.5

First published (updated )

CVE-2025-68649

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 20

Severity

3.7

First published (updated )

CVE-2026-22629

Fortinet FortiAnalyzerMFA Bypass in GUI

Risk 66

Severity

7.2

First published (updated )

CVE-2026-22572

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Risk 66

Severity

7.2

First published (updated )

CVE-2025-68648

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 66

Severity

7.2

First published (updated )

CVE-2025-48418

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Risk 46

Severity

6.9

First published (updated )

CVE-2025-68482

Fortinet FortiAnalyzerSQL injection in jsonrpc api

Risk 66

Severity

7.2

First published (updated )

CVE-2025-49784

Fortinet FortiAnalyzer-BigDataSQL injection in jsonrpc api

Risk 47

Severity

5.6

First published (updated )

Advisory

FG-IR-26-095

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 59

Severity

6.4

First published (updated )

Advisory

FG-IR-26-081

Fortinet FortiAnalyzerMFA Bypass in GUI

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-26-090

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 19

Severity

3.4

First published (updated )

Advisory

FG-IR-26-079

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Risk 44

Severity

6.3

First published (updated )

Advisory

FG-IR-26-078

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Risk 64

Severity

6.5

First published (updated )

Advisory

FG-IR-26-092

The RegisterFortinet unearths another critical bug as SSO accounts borked post-patch

Exploited

Zeroday

First published (updated )

News

The Register

BleepingComputerFortinet blocks exploited FortiCloud SSO zero day until patch is ready

Exploited

Zeroday

First published (updated )

News

BleepingComputer

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 80

Severity

9.8

Exploited

EPSS

2.42%

First published (updated )

CVE-2026-24858

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 85

Severity

9.4

First published (updated )

Advisory

FG-IR-26-060

Fortinet FortiOSPrivate key readable by admin

Risk 32

Severity

6

First published (updated )

CVE-2024-40593

Fortinet FortiAnalyzerPrivate key readable by admin

Risk 31

Severity

5.9

First published (updated )

Advisory

FG-IR-24-133

Fortinet FortiAnalyzerRace condion in FortiCloud SSO SAML authentication

Risk 31

Severity

5.3

First published (updated )

CVE-2025-54973

Fortinet FortiAnalyzerMissing authentication check in OFTP service

Risk 40

Severity

6.5

First published (updated )

CVE-2025-53845

Fortinet FortiProxyHeap Overflow in fgfmsd

Risk 66

Severity

7.2

First published (updated )

CVE-2024-50571

Fortinet FortiAnalyzerLog Pollution via login page

Risk 26

Severity

5

First published (updated )

Advisory

FG-IR-24-453

Fortinet FortiAnalyzerLog Pollution via login page

Risk 27

Severity

5.3

First published (updated )

CVE-2024-52962

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 67

Severity

7.1

First published (updated )

Advisory

FG-IR-24-046

Trending

Versions

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Fortinet FortiAnalyzerPath Traversal in CLI

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerPath Traversal in CLI

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiAnalyzerMFA Bypass in GUI

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Fortinet FortiAnalyzerSQL injection in jsonrpc api

Fortinet FortiAnalyzer-BigDataSQL injection in jsonrpc api

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Fortinet FortiAnalyzerMFA Bypass in GUI

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

The RegisterFortinet unearths another critical bug as SSO accounts borked post-patch

BleepingComputerFortinet blocks exploited FortiCloud SSO zero day until patch is ready

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Fortinet FortiOSPrivate key readable by admin

Fortinet FortiAnalyzerPrivate key readable by admin

Fortinet FortiAnalyzerRace condion in FortiCloud SSO SAML authentication

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerMissing authentication check in OFTP service

Fortinet FortiProxyHeap Overflow in fgfmsd

Fortinet FortiAnalyzerLog Pollution via login page

Fortinet FortiAnalyzerLog Pollution via login page

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Don't miss critical vulnerabilities

Company

Resources

Contact