Latest medium severity vulnerabilities for "fortinet fortios"

Fortinet FortiPAMStack Buffer Overflow in Log Report

Risk 61

Severity

6.6

First published (updated )

CVE-2026-59837

Fortinet FortiPAMStack Buffer Overflow in Log Report

Risk 59

Severity

5.9

First published (updated )

Advisory

FG-IR-26-148

Fortinet FortiOSHeader injection in Web Filter warning page

Risk 22

Severity

4.3

First published (updated )

CVE-2025-62675

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Risk 38

Severity

5

First published (updated )

Advisory

FG-IR-26-151

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Risk 39

Severity

5.5

First published (updated )

CVE-2026-59839

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.1

First published (updated )

Advisory

FG-IR-26-154

Fortinet FortiOSHeader injection in captive portal authentication form

Risk 22

Severity

4.3

First published (updated )

CVE-2025-62826

Fortinet FortiPAMSSL-VPN Reflected XSS

Risk 38

Severity

6.1

First published (updated )

CVE-2026-23573

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2025-43892

Fortinet FortiPAMSSL-VPN Reflected XSS

Risk 38

Severity

6.1

First published (updated )

Advisory

FG-IR-26-150

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2026-59840

Fortinet FortiOSRestricted CLI escape using Lua

Risk 60

Severity

6.7

First published (updated )

CVE-2025-67862

Fortinet FortiOSRestricted CLI escape using Lua

Risk 58

Severity

6

First published (updated )

Advisory

FG-IR-26-143

Fortinet FortiOSMissing Authentication for critical function in CAPWAP daemon

Risk 37

Severity

6.2

First published (updated )

Advisory

FG-IR-26-125

Fortinet FortiPAMPath Traversal in CLI

Risk 43

Severity

5.4

First published (updated )

Advisory

FG-IR-26-122

Fortinet FortiPAMPath Traversal in CLI

Risk 52

Severity

6.5

First published (updated )

CVE-2025-61624

Fortinet FortiOSRequest smuggling attack in FortiOS

Risk 30

Severity

5.8

First published (updated )

CVE-2025-55018

Fortinet FortiOSRequest smuggling attack in FortiOS

Risk 28

Severity

5.2

First published (updated )

Advisory

FG-IR-25-667

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Risk 35

Severity

5.9

First published (updated )

CVE-2025-68686

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Risk 33

Severity

5.3

First published (updated )

Advisory

FG-IR-25-934

Fortinet FortiOSFormat String Vulnerability in CAPWAP fast-failover mode

Risk 60

Severity

6.7

First published (updated )

Advisory

FG-IR-25-795

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Risk 28

Severity

4.2

First published (updated )

CVE-2025-62439

Fortinet FortiOSPrivate key readable by admin

Risk 32

Severity

6

First published (updated )

CVE-2024-40593

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Risk 42

Severity

5.6

First published (updated )

CVE-2025-62631

Fortinet FortiAnalyzerPrivate key readable by admin

Risk 31

Severity

5.9

First published (updated )

Advisory

FG-IR-24-133

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Risk 42

Severity

5.3

First published (updated )

Advisory

FG-IR-25-411

Fortinet FortiOSInsertion of sensitive information into REST API logs

Risk 61

Severity

6.6

First published (updated )

CVE-2024-47570

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Risk 60

Severity

6.3

First published (updated )

Advisory

FG-IR-24-268

Fortinet FortiPAMTrusted hosts bypass via SSH

Risk 44

Severity

6

First published (updated )

CVE-2025-54821

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Risk 38

Severity

6.1

First published (updated )

CVE-2025-47890

Trending

Versions

Fortinet FortiPAMStack Buffer Overflow in Log Report

Fortinet FortiPAMStack Buffer Overflow in Log Report

Fortinet FortiOSHeader injection in Web Filter warning page

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Don't miss critical vulnerabilities

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiOSHeader injection in captive portal authentication form

Fortinet FortiPAMSSL-VPN Reflected XSS

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiPAMSSL-VPN Reflected XSS

Don't miss critical vulnerabilities

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiOSRestricted CLI escape using Lua

Fortinet FortiOSRestricted CLI escape using Lua

Fortinet FortiOSMissing Authentication for critical function in CAPWAP daemon

Fortinet FortiPAMPath Traversal in CLI

Don't miss critical vulnerabilities

Fortinet FortiPAMPath Traversal in CLI

Fortinet FortiOSRequest smuggling attack in FortiOS

Fortinet FortiOSRequest smuggling attack in FortiOS

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Don't miss critical vulnerabilities

Fortinet FortiOSFormat String Vulnerability in CAPWAP fast-failover mode

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Fortinet FortiOSPrivate key readable by admin

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Fortinet FortiAnalyzerPrivate key readable by admin

Don't miss critical vulnerabilities

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Fortinet FortiOSInsertion of sensitive information into REST API logs

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Fortinet FortiPAMTrusted hosts bypass via SSH

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Don't miss critical vulnerabilities

Company

Resources

Contact