Latest vulnerabilities for "fortios"

Fortinet FortiOSWeak authentication in security fabric daemon

Risk 35

Severity

5.9

First published (updated )

CVE-2024-50568

Fortinet FortiProxySSH key is added even if operation is aborted

Risk 16

Severity

3.2

First published (updated )

CVE-2023-29184

Fortinet FortiOSWeak authentication in security fabric daemon

Risk 34

Severity

5.6

First published (updated )

Advisory

FG-IR-24-058

Fortinet FortiProxySSH key is added even if operation is aborted

Risk 16

Severity

3.1

First published (updated )

Advisory

FG-IR-23-008

Fortinet FortiOSeap-cert-auth bypass via revoked certificate

Risk 36

Severity

6

First published (updated )

Advisory

FG-IR-24-544

Fortinet FortiOSPrivilege escalation in GUI websocket module

Risk 61

Severity

6.5

First published (updated )

Advisory

FG-IR-25-006

The RegisterPlay ransomware crims exploit SimpleHelp flaw in double-extortion schemes

Exploited

First published (updated )

News

The Register

Fortinet FortiOSBuffer over-read in FGFM

Risk 15

Severity

3.7

EPSS

0.05%

First published (updated )

CVE-2025-47295

Fortinet FortiOSBuffer over-read in FGFM

Risk 19

Severity

3.4

First published (updated )

Advisory

FG-IR-24-381

Fortinet FortiOSTACACS+ authentication bypass

Risk 83

Severity

9

First published (updated )

Advisory

FG-IR-24-472

Fortinet FortiOSDenial of Service in Security Fabric Root

Risk 25

Severity

4.8

First published (updated )

Advisory

FG-IR-24-388

Fortinet FortiOSDenial of Service in Security Fabric Root

Risk 19

Severity

5.3

EPSS

0.05%

First published (updated )

CVE-2025-47294

BleepingComputerOver 16,000 Fortinet devices compromised with symlink backdoor

Zeroday

First published (updated )

News

BleepingComputer

BleepingComputerFortinet: Symlink trick gives access to patched FortiGate VPN devices

Exploited

First published (updated )

News

BleepingComputer

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 67

Severity

7.1

First published (updated )

Advisory

FG-IR-24-046

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 72

Severity

7.5

First published (updated )

CVE-2024-50565

Fortinet FortiOSUse of uninitialized resource in SSLVPN websocket

Risk 67

Severity

6.7

First published (updated )

Advisory

FG-IR-23-165

Fortinet FortiWebA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet F…

Risk 86

Severity

9.8

First published (updated )

CVE-2023-25610

Fortinet Antivirus EngineFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.001…

Risk 43

Severity

7.5

First published (updated )

CVE-2020-9295

Fortinet FortiOSInfoleak

Risk 26

Severity

5

First published (updated )

CVE-2020-29010

Fortinet FortiOSXSS

Risk 34

Severity

5.4

First published (updated )

CVE-2019-15706

The RegisterNew kids on the ransomware block channel Lockbit to raid Fortinet firewalls

Exploited

Zeroday

First published (updated )

News

The Register

Fortinet FortiOSMultiple format string vulnerabilities

Risk 66

Severity

7

First published (updated )

Advisory

FG-IR-24-325

The RegisterMicrosoft takes it easy on February's Patch Tuesday

Exploited

Zeroday

First published (updated )

News

The Register

BleepingComputerFortinet discloses second firewall auth bypass patched in January

Exploited

Zeroday

First published (updated )

News

BleepingComputer

Fortinet FortiOSFortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands

Risk 59

Severity

6.3

First published (updated )

Advisory

FG-IR-23-261

Fortinet FortiOSStack buffer overflow in fabric service

Risk 74

Severity

7.7

First published (updated )

Advisory

FG-IR-24-160

Fortinet FortiOSPermission escalation due to an Improper Privilege Management

Risk 76

Severity

8

First published (updated )

Advisory

FG-IR-24-302

Dark ReadingActively Exploited Fortinet Zero-Day Gives Attackers Super-Admin Privileges

Exploited

Zeroday

First published (updated )

News

Dark Reading

Get FortiRekt, I am the Super_Admin Now - FortiOS Authentication Bypass CVE-2024-55591 - watchTowr Labs

First published (updated )

Social

Trending

Versions

Fortinet FortiOSWeak authentication in security fabric daemon

Fortinet FortiProxySSH key is added even if operation is aborted

Fortinet FortiOSWeak authentication in security fabric daemon

Fortinet FortiProxySSH key is added even if operation is aborted

Fortinet FortiOSeap-cert-auth bypass via revoked certificate

Don't miss critical vulnerabilities

Fortinet FortiOSPrivilege escalation in GUI websocket module

The RegisterPlay ransomware crims exploit SimpleHelp flaw in double-extortion schemes

Fortinet FortiOSBuffer over-read in FGFM

Fortinet FortiOSBuffer over-read in FGFM

Fortinet FortiOSTACACS+ authentication bypass

Don't miss critical vulnerabilities

Fortinet FortiOSDenial of Service in Security Fabric Root

Fortinet FortiOSDenial of Service in Security Fabric Root

BleepingComputerOver 16,000 Fortinet devices compromised with symlink backdoor

BleepingComputerFortinet: Symlink trick gives access to patched FortiGate VPN devices

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Fortinet FortiOSUse of uninitialized resource in SSLVPN websocket

Fortinet FortiWebA buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet F…

Fortinet Antivirus EngineFortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.001…

Fortinet FortiOSInfoleak

Don't miss critical vulnerabilities

Fortinet FortiOSXSS

The RegisterNew kids on the ransomware block channel Lockbit to raid Fortinet firewalls

Fortinet FortiOSMultiple format string vulnerabilities

The RegisterMicrosoft takes it easy on February's Patch Tuesday

BleepingComputerFortinet discloses second firewall auth bypass patched in January

Don't miss critical vulnerabilities

Fortinet FortiOSFortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands

Fortinet FortiOSStack buffer overflow in fabric service

Fortinet FortiOSPermission escalation due to an Improper Privilege Management

Dark ReadingActively Exploited Fortinet Zero-Day Gives Attackers Super-Admin Privileges

Get FortiRekt, I am the Super_Admin Now - FortiOS Authentication Bypass CVE-2024-55591 - watchTowr Labs

Don't miss critical vulnerabilities

Company

Resources

Contact