Latest high severity vulnerabilities for "fortinet fortimanager"

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Risk 66

Severity

7.2

First published (updated )

CVE-2025-61848

Fortinet FortiAnalyzerMFA Bypass in GUI

Risk 66

Severity

7.2

First published (updated )

CVE-2026-22572

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Risk 66

Severity

7.2

First published (updated )

CVE-2025-68648

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 66

Severity

7.2

First published (updated )

CVE-2025-48418

Fortinet FortiManagerBuffer overflow via fgtupdates service

Risk 75

Severity

8.1

First published (updated )

CVE-2025-54820

Fortinet FortiManagerBuffer overflow via fgtupdates service

Risk 71

Severity

7

First published (updated )

Advisory

FG-IR-26-098

Fortinet FortiProxyHeap Overflow in fgfmsd

Risk 66

Severity

7.2

First published (updated )

CVE-2024-50571

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 67

Severity

7.1

First published (updated )

Advisory

FG-IR-24-046

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 72

Severity

7.5

First published (updated )

CVE-2024-26013

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Risk 72

Severity

7.5

First published (updated )

CVE-2024-50565

OpenBSD OpenSSHPre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466

Risk 65

Severity

7.5

Exploited

EPSS

23.44%

First published (updated )

CVE-2025-26466

Fortinet FortiManagerUse of Hard-coded Cryptographic Key to encrypt sensitive data

Risk 44

Severity

7.7

First published (updated )

CVE-2024-33504

Fortinet FortiManagerOS command injection in external connector

Risk 66

Severity

7.2

First published (updated )

CVE-2024-40584

Fortinet FortiManagerA out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.…

Risk 79

Severity

8.8

First published (updated )

CVE-2024-35273

Fortinet FortiAnalyzerSQL Injection

Risk 79

Severity

8.8

First published (updated )

CVE-2024-35275

Fortinet FortiManagerOS Command Injection, Command Injection

Risk 79

Severity

8.8

First published (updated )

CVE-2024-50566

Fortinet FortiAnalyzerMultiple privilege escalation

Risk 69

Severity

7.8

First published (updated )

CVE-2024-33503

Fortinet FortiManagerMissing authentication for managed device configuration files

Risk 49

Severity

8.6

First published (updated )

CVE-2024-35277

Fortinet FortiAnalyzerArbitrary file delete on firmware import image feature

Risk 66

Severity

7.2

First published (updated )

CVE-2024-33502

Fortinet FortiAnalyzerArbitrary file write on GUI

Risk 66

Severity

7.2

First published (updated )

CVE-2024-36512

Fortinet FortiManager CloudCommand injection in csfd daemon

Risk 79

Severity

8.8

First published (updated )

CVE-2024-46662

Fortinet FortiManager CloudCommand injection in csfd daemon

Risk 77

Severity

8.3

First published (updated )

Advisory

FG-IR-24-222

Fortinet FortiManagerAdmin Account Persistence after Deletion

Risk 74

Severity

7.9

First published (updated )

Advisory

FG-IR-24-239

Fortinet FortiManagerMissing authentication for managed device configuration files

Risk 48

Severity

8.4

First published (updated )

Advisory

FG-IR-24-135

Fortinet FortiAnalyzerArbitrary file write on GUI

Risk 66

Severity

7

First published (updated )

Advisory

FG-IR-24-152

Fortinet FortiAnalyzerMultiple privilege escalation

Risk 69

Severity

7.8

First published (updated )

CVE-2024-45331

Fortinet FortiProxyPath traversal in csfd daemon

Risk 42

Severity

7.1

First published (updated )

Advisory

FG-IR-24-259

Fortinet FortiManagerOS command injection

Risk 51

Severity

7.2

EPSS

0.37%

First published (updated )

CVE-2024-48889

Fortinet FortiManagerOS command injection

Risk 67

Severity

7.2

First published (updated )

Advisory

FG-IR-24-425

Fortinet FortiManagerHeap buffer overflow in httpd

Risk 51

Severity

7.3

First published (updated )

CVE-2024-33505

Trending

Versions

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Fortinet FortiAnalyzerMFA Bypass in GUI

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Fortinet FortiManagerBuffer overflow via fgtupdates service

Don't miss critical vulnerabilities

Fortinet FortiManagerBuffer overflow via fgtupdates service

Fortinet FortiProxyHeap Overflow in fgfmsd

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Fortinet FortiAnalyzerNo certificate name verification for fgfm connection

Don't miss critical vulnerabilities

OpenBSD OpenSSHPre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466

Fortinet FortiManagerUse of Hard-coded Cryptographic Key to encrypt sensitive data

Fortinet FortiManagerOS command injection in external connector

Fortinet FortiManagerA out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.…

Fortinet FortiAnalyzerSQL Injection

Don't miss critical vulnerabilities

Fortinet FortiManagerOS Command Injection, Command Injection

Fortinet FortiAnalyzerMultiple privilege escalation

Fortinet FortiManagerMissing authentication for managed device configuration files

Fortinet FortiAnalyzerArbitrary file delete on firmware import image feature

Fortinet FortiAnalyzerArbitrary file write on GUI

Don't miss critical vulnerabilities

Fortinet FortiManager CloudCommand injection in csfd daemon

Fortinet FortiManager CloudCommand injection in csfd daemon

Fortinet FortiManagerAdmin Account Persistence after Deletion

Fortinet FortiManagerMissing authentication for managed device configuration files

Fortinet FortiAnalyzerArbitrary file write on GUI

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerMultiple privilege escalation

Fortinet FortiProxyPath traversal in csfd daemon

Fortinet FortiManagerOS command injection

Fortinet FortiManagerOS command injection

Fortinet FortiManagerHeap buffer overflow in httpd

Don't miss critical vulnerabilities

Company

Resources

Contact