Latest medium severity vulnerabilities for "fortinet fortios"

Fortinet FortiOSMissing Authentication for critical function in CAPWAP daemon

Risk 37

Severity

6.2

First published (updated )

Advisory

FG-IR-26-125

Fortinet FortiPAMPath Traversal in CLI

Risk 43

Severity

5.4

First published (updated )

Advisory

FG-IR-26-122

Fortinet FortiPAMPath Traversal in CLI

Risk 49

Severity

6.5

First published (updated )

CVE-2025-61624

Fortinet FortiOSRequest smuggling attack in FortiOS

Risk 30

Severity

5.8

First published (updated )

CVE-2025-55018

Fortinet FortiOSRequest smuggling attack in FortiOS

Risk 28

Severity

5.2

First published (updated )

Advisory

FG-IR-25-667

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Risk 35

Severity

5.9

First published (updated )

CVE-2025-68686

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Risk 33

Severity

5.3

First published (updated )

Advisory

FG-IR-25-934

Fortinet FortiOSFormat String Vulnerability in CAPWAP fast-failover mode

Risk 60

Severity

6.7

First published (updated )

Advisory

FG-IR-25-795

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Risk 28

Severity

4.2

First published (updated )

CVE-2025-62439

Fortinet FortiOSPrivate key readable by admin

Risk 32

Severity

6

First published (updated )

CVE-2024-40593

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Risk 42

Severity

5.6

First published (updated )

CVE-2025-62631

Fortinet FortiAnalyzerPrivate key readable by admin

Risk 31

Severity

5.9

First published (updated )

Advisory

FG-IR-24-133

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Risk 42

Severity

5.3

First published (updated )

Advisory

FG-IR-25-411

Fortinet FortiOSInsertion of sensitive information into REST API logs

Risk 61

Severity

6.6

First published (updated )

CVE-2024-47570

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Risk 60

Severity

6.3

First published (updated )

Advisory

FG-IR-24-268

Fortinet FortiPAMTrusted hosts bypass via SSH

Risk 44

Severity

6

First published (updated )

CVE-2025-54821

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Risk 38

Severity

6.1

First published (updated )

CVE-2025-47890

Fortinet FortiOSMultiple Unchecked Return Value leading to Null Pointer Dereference

Risk 30

Severity

4.9

First published (updated )

CVE-2025-58903

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Risk 38

Severity

6.1

First published (updated )

CVE-2025-31366

Fortinet FortiOSInsufficient Session Expiration in SSLVPN using SAML authentication

Risk 40

Severity

6.5

First published (updated )

CVE-2025-25252

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Risk 22

Severity

4.3

First published (updated )

CVE-2025-31514

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Risk 27

Severity

5.3

First published (updated )

CVE-2025-25255

Fortinet FortiOSImproper autorization over static files

Risk 22

Severity

4.3

First published (updated )

CVE-2025-54822

Fortinet FortiOSFGFM protocol allows unauthenticated reset of the connection

Risk 27

Severity

5.3

First published (updated )

CVE-2024-26008

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2024-47569

Fortinet FortiPAMAuthenticated Heap Overflow in SSL-VPN bookmarks

Risk 67

Severity

6.7

First published (updated )

Advisory

FG-IR-25-756

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Risk 25

Severity

4.8

First published (updated )

Advisory

FG-IR-24-372

Fortinet FortiOSHeap-based buffer overflow in cw_stad daemon

Risk 60

Severity

6.7

First published (updated )

CVE-2025-24477

Fortinet FortiProxyPrivilege escalation in automation-stitch

Risk 60

Severity

6.7

First published (updated )

CVE-2025-22862

Fortinet FortiOSLDAP Clear-text credentials retrievable with IP modification

Risk 26

Severity

4.4

First published (updated )

CVE-2024-32122

Trending

Versions

Fortinet FortiOSMissing Authentication for critical function in CAPWAP daemon

Fortinet FortiPAMPath Traversal in CLI

Fortinet FortiPAMPath Traversal in CLI

Fortinet FortiOSRequest smuggling attack in FortiOS

Fortinet FortiOSRequest smuggling attack in FortiOS

Don't miss critical vulnerabilities

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Fortinet FortiOSSSL-VPN Symlink Persistence Patch Bypass

Fortinet FortiOSFormat String Vulnerability in CAPWAP fast-failover mode

Fortinet FortiOSFirewall policy bypass in FSSO Terminal Services Agent

Fortinet FortiOSPrivate key readable by admin

Don't miss critical vulnerabilities

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Fortinet FortiAnalyzerPrivate key readable by admin

Fortinet FortiOSInsufficient Session Expiration in SSLVPN

Fortinet FortiOSInsertion of sensitive information into REST API logs

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Don't miss critical vulnerabilities

Fortinet FortiPAMTrusted hosts bypass via SSH

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Fortinet FortiOSMultiple Unchecked Return Value leading to Null Pointer Dereference

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Fortinet FortiOSInsufficient Session Expiration in SSLVPN using SAML authentication

Don't miss critical vulnerabilities

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Fortinet FortiOSImproper autorization over static files

Fortinet FortiOSFGFM protocol allows unauthenticated reset of the connection

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Don't miss critical vulnerabilities

Fortinet FortiPAMAuthenticated Heap Overflow in SSL-VPN bookmarks

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Fortinet FortiOSHeap-based buffer overflow in cw_stad daemon

Fortinet FortiProxyPrivilege escalation in automation-stitch

Fortinet FortiOSLDAP Clear-text credentials retrievable with IP modification

Don't miss critical vulnerabilities

Company

Resources

Contact