Where
AND
-Infinity
0

Trending

Last week
Last month
Last year

The RegisterFortinet unearths another critical bug as SSO accounts borked post-patch

Exploited
Zeroday
First published (updated )
News
The Register

BleepingComputerFortinet blocks exploited FortiCloud SSO zero day until patch is ready

Exploited
Zeroday
First published (updated )
News
BleepingComputer

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 80
Severity
9.8
Exploited
EPSS
2.42%
First published (updated )
CVE-2026-24858

The RegisterFortinet admits FortiGate SSO bug still exploitable despite December patch

Exploited
First published (updated )
News
The Register

BleepingComputerOver 10K Fortinet firewalls exposed to actively exploited 2FA bypass

Exploited
First published (updated )
News
BleepingComputer
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

BleepingComputerOver 25,000 FortiCloud SSO devices exposed to remote attacks

Exploited
Zeroday
First published (updated )
News
BleepingComputer

BleepingComputerHackers exploit newly patched Fortinet auth bypass flaws

Exploited
First published (updated )
News
BleepingComputer

Fortinet FortiOSMultiple Fortinet Products' FortiCloud SSO Login Authentication Bypass

Risk 99
Severity
9.8
Exploited
Trending
Year
First published (updated )
CVE-2025-59718

Fortinet FortiOSInsufficient Session Expiration in SSL-VPN cookie

Risk 65
Severity
4.8
Exploited
First published (updated )
CVE-2024-50562

Fortinet FortiOSPermission escalation due to an Improper Privilege Management

Risk 95
Severity
8.8
Exploited
First published (updated )
CVE-2024-40591
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fortinet FortiProxyAuthentication bypass in Node.js websocket module and CSF requests

Risk 99
Severity
9.8
Exploited
Zeroday
First published (updated )
CVE-2024-55591

Fortinet FortiProxyAuthentication bypass in Node.js websocket module and CSF requests

Risk 78
Severity
9.6
Exploited
EPSS
0.04%
First published (updated )
CVE-2025-24472

Fortinet FortiOSFortinet Multiple Products Format String Vulnerability

Risk 88
Severity
9.8
Exploited
Zeroday
EPSS
0.09%
First published (updated )
CVE-2024-23113

Fortinet FortiOSOut-of-bound Write in sslvpnd

Risk 90
Severity
9.8
Exploited
Zeroday
EPSS
2.29%
First published (updated )
CVE-2024-21762

Microsoft Windows 10PAN-OS: CHAP and PAP When Used with RADIUS Authentication Lead to Privilege Escalation (Severity: MEDIUM)

Risk 96
Severity
5.3
Exploited
First published (updated )
CVE-2024-3596
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Microsoft Windows 10- Rapid Reset HTTP/2 vulnerability

Risk 65
Severity
7.5
Exploited
Zeroday
First published (updated )
CVE-2023-44487

Fortinet FortiOSHeap buffer overflow in sslvpn pre-authentication

Risk 99
Severity
9.8
Exploited
Zeroday
First published (updated )
CVE-2023-27997

Fortinet FortiOSPath traversal in execute command

Risk 67
Severity
7.1
Exploited
First published (updated )
CVE-2022-41328

Apple tvOSApple Multiple Products Memory Corruption Vulnerability

Risk 81
Severity
7
Exploited
First published (updated )
CVE-2022-48618

Fortinet FortiOSHeap-based buffer overflow in sslvpnd

Risk 99
Severity
9.8
Exploited
Zeroday
First published (updated )
CVE-2022-42475
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fortinet FortiProxyAuthentication bypass in administrative interface

Risk 99
Severity
9.8
Exploited
Zeroday
First published (updated )
CVE-2022-40684

Fortinet FortiOSFortinet FortiOS Arbitrary File Download

Risk 83
Severity
7.8
Exploited
First published (updated )
CVE-2021-44168

Fortinet FortiOSFortinet FortiOS SSL VPN Improper Authentication Vulnerability

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2020-12812

Fortinet FortiOSFortinet FortiOS Use of Hard-Coded Credentials Vulnerability

Risk 65
Severity
6.5
Exploited
First published (updated )
CVE-2019-6693

Fortinet FortiOSFG default configuration is not secure/ By default, FG does not verify LDAP server identity

Risk 65
Severity
6.5
Exploited
First published (updated )
CVE-2019-5591
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Fortinet FortiOS[FortiProxy] SSL VPN account hijack (unauthorized modification of users passwords)

Risk 76
Severity
9.1
Exploited
First published (updated )
CVE-2018-13382

Fortinet FortiOS[FortiProxy] file leaking through SSL VPN language resource request

Risk 99
Severity
9.8
Exploited
First published (updated )
CVE-2018-13379

Fortinet FortiOSFortinet FortiOS and FortiProxy Out-of-bounds Write

Risk 65
Severity
6.5
Exploited
First published (updated )
CVE-2018-13383

Fortinet FortiADCFortiGate & FortiADC - Read-only admins can obtain the LDAP credentials configured in the FortiGate and FortiADC using the LDAP test connectivity feature

Risk 93
Severity
4.3
Exploited
First published (updated )
CVE-2018-13374

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203