Latest vulnerabilities for "fortinet fortiweb"

Fortinet FortiWebZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

Risk 23

First published (updated )

ZDI-CAN-28660

Fortinet FortiWebFortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

Risk 23

First published (updated )

Advisory

ZDI-26-265

Fortinet FortiWebFortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

Risk 73

First published (updated )

Advisory

ZDI-26-266

Fortinet FortiWebZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

Risk 80

First published (updated )

ZDI-CAN-28661

Fortinet FortiWebAn out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.…

Risk 66

Severity

7.2

First published (updated )

CVE-2026-40688

Fortinet FortiWebInteger Overflow

Risk 30

Severity

4.9

First published (updated )

CVE-2026-39811

Fortinet FortiWebPath Traversal

Risk 60

Severity

6.7

First published (updated )

CVE-2026-39814

Fortinet FortiWebOS Command Injection, Command Injection

Risk 66

Severity

7.2

First published (updated )

CVE-2025-66178

Fortinet FortiWebBuffer Overflow

Risk 61

Severity

6.6

First published (updated )

CVE-2026-24640

Fortinet FortiWebNull Pointer Dereference

Risk 38

Severity

6.5

First published (updated )

CVE-2026-24641

Fortinet FortiWebAn Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet Forti…

Risk 75

Severity

8.1

First published (updated )

CVE-2026-24017

Fortinet FortiWebAn authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWe…

Risk 27

Severity

5.3

First published (updated )

CVE-2025-48840

Fortinet FortiWebBuffer Overflow

Risk 46

Severity

6.6

EPSS

0.04%

First published (updated )

CVE-2026-30897

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 80

Severity

9.8

Exploited

EPSS

2.42%

First published (updated )

CVE-2026-24858

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 85

Severity

9.4

First published (updated )

Advisory

FG-IR-26-060

BleepingComputerOver 25,000 FortiCloud SSO devices exposed to remote attacks

Exploited

Zeroday

First published (updated )

News

BleepingComputer

BleepingComputerHackers exploit newly patched Fortinet auth bypass flaws

Exploited

First published (updated )

News

BleepingComputer

Fortinet FortiWebZDI-25-1094: Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Risk 75

First published (updated )

ZDI-CAN-28211

Fortinet FortiWebFortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Risk 75

First published (updated )

Advisory

ZDI-25-1094

BleepingComputerFortinet warns of critical FortiCloud SSO login auth bypass flaws

First published (updated )

News

BleepingComputer

Fortinet FortiWebA use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability …

Risk 45

Severity

7.5

First published (updated )

CVE-2025-64471

Fortinet FortiWebA reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8…

Risk 75

Severity

8.1

First published (updated )

CVE-2025-64447

Fortinet FortiOSMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Risk 84

Severity

9.1

First published (updated )

Advisory

FG-IR-25-647

Fortinet FortiOSMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Risk 99

Severity

9.8

Exploited

Trending

Year

First published (updated )

CVE-2025-59718

Fortinet FortiWebMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Risk 94

Severity

9.8

First published (updated )

CVE-2025-59719

Fortinet FortiWebA use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions,…

Risk 32

Severity

5.5

First published (updated )

CVE-2025-59669

Fortinet FortiWebFortinet FortiWeb OS Command Injection Vulnerability

Risk 87

Severity

7.2

Exploited

First published (updated )

CVE-2025-58034

Fortinet FortiWebPath confusion vulnerability in GUI

Risk 99

Severity

9.8

Exploited

First published (updated )

CVE-2025-64446

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2024-47569

Fortinet FortiWebPath Traversal

Risk 30

Severity

4.9

First published (updated )

CVE-2025-53609

Trending

Versions

Fortinet FortiWebZDI-26-265: Fortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

Fortinet FortiWebFortinet FortiWeb cgi_buf_alloc Integer Overflow Denial-of-Service Vulnerability

Fortinet FortiWebFortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

Fortinet FortiWebZDI-26-266: Fortinet FortiWeb cat_cgi_paths Out-Of-Bounds Write Remote Code Execution Vulnerability

Fortinet FortiWebAn out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.…

Don't miss critical vulnerabilities

Fortinet FortiWebInteger Overflow

Fortinet FortiWebPath Traversal

Fortinet FortiWebOS Command Injection, Command Injection

Fortinet FortiWebBuffer Overflow

Fortinet FortiWebNull Pointer Dereference

Don't miss critical vulnerabilities

Fortinet FortiWebAn Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet Forti…

Fortinet FortiWebAn authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWe…

Fortinet FortiWebBuffer Overflow

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Don't miss critical vulnerabilities

BleepingComputerOver 25,000 FortiCloud SSO devices exposed to remote attacks

BleepingComputerHackers exploit newly patched Fortinet auth bypass flaws

Fortinet FortiWebZDI-25-1094: Fortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Fortinet FortiWebFortinet FortiWeb ApacheCookie_parse Improper Verification of Cryptographic Signature Authentication Bypass Vulnerability

Don't miss critical vulnerabilities

Fortinet FortiWebA use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability …

Fortinet FortiWebA reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8…

Fortinet FortiOSMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Fortinet FortiOSMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Fortinet FortiWebMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Don't miss critical vulnerabilities

Fortinet FortiWebA use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions,…

Fortinet FortiWebFortinet FortiWeb OS Command Injection Vulnerability

Fortinet FortiWebPath confusion vulnerability in GUI

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Fortinet FortiWebPath Traversal

Don't miss critical vulnerabilities

Company

Resources

Contact