Latest medium severity vulnerabilities for "fortinet fortiproxy"

Fortinet FortiPAMStack Buffer Overflow in Log Report

Risk 61

Severity

6.6

First published (updated )

CVE-2026-59837

Fortinet FortiPAMStack Buffer Overflow in Log Report

Risk 59

Severity

5.9

First published (updated )

Advisory

FG-IR-26-148

Fortinet FortiOSHeader injection in Web Filter warning page

Risk 22

Severity

4.3

First published (updated )

CVE-2025-62675

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Risk 38

Severity

5

First published (updated )

Advisory

FG-IR-26-151

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Risk 39

Severity

5.5

First published (updated )

CVE-2026-59839

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.1

First published (updated )

Advisory

FG-IR-26-154

Fortinet FortiOSHeader injection in captive portal authentication form

Risk 22

Severity

4.3

First published (updated )

CVE-2025-62826

Fortinet FortiPAMSSL-VPN Reflected XSS

Risk 38

Severity

6.1

First published (updated )

CVE-2026-23573

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2025-43892

Fortinet FortiPAMSSL-VPN Reflected XSS

Risk 38

Severity

6.1

First published (updated )

Advisory

FG-IR-26-150

Fortinet FortiOSBuffer overread in authd and wad daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2026-59840

Fortinet FortiOSRestricted CLI escape using Lua

Risk 60

Severity

6.7

First published (updated )

CVE-2025-67862

Fortinet FortiOSRestricted CLI escape using Lua

Risk 58

Severity

6

First published (updated )

Advisory

FG-IR-26-143

Fortinet FortiPAMPath Traversal in CLI

Risk 43

Severity

5.4

First published (updated )

Advisory

FG-IR-26-122

Fortinet FortiPAMPath Traversal in CLI

Risk 52

Severity

6.5

First published (updated )

CVE-2025-61624

Fortinet FortiOSInsertion of sensitive information into REST API logs

Risk 61

Severity

6.6

First published (updated )

CVE-2024-47570

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Risk 60

Severity

6.3

First published (updated )

Advisory

FG-IR-24-268

Fortinet FortiPAMTrusted hosts bypass via SSH

Risk 44

Severity

6

First published (updated )

CVE-2025-54821

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Risk 38

Severity

6.1

First published (updated )

CVE-2025-47890

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Risk 38

Severity

6.1

First published (updated )

CVE-2025-31366

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Risk 22

Severity

4.3

First published (updated )

CVE-2025-31514

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Risk 27

Severity

5.3

First published (updated )

CVE-2025-25255

Fortinet FortiOSImproper autorization over static files

Risk 22

Severity

4.3

First published (updated )

CVE-2025-54822

Fortinet FortiOSFGFM protocol allows unauthenticated reset of the connection

Risk 27

Severity

5.3

First published (updated )

CVE-2024-26008

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2024-47569

Fortinet FortiPAMAuthenticated Heap Overflow in SSL-VPN bookmarks

Risk 67

Severity

6.7

First published (updated )

Advisory

FG-IR-25-756

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Risk 25

Severity

4.8

First published (updated )

Advisory

FG-IR-24-372

Fortinet FortiOSInteger Overflow on SSL-VPN bookmarks

Risk 38

Severity

6.5

First published (updated )

CVE-2025-25248

Fortinet FortiOSDNS type 65 resource record requests bypass DNS filter

Risk 27

Severity

5.3

First published (updated )

CVE-2024-55599

Fortinet FortiProxyPrivilege escalation in automation-stitch

Risk 60

Severity

6.7

First published (updated )

CVE-2025-22862

Trending

Versions

Fortinet FortiPAMStack Buffer Overflow in Log Report

Fortinet FortiPAMStack Buffer Overflow in Log Report

Fortinet FortiOSHeader injection in Web Filter warning page

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Fortinet FortiPAMPath traversal in CLI command allows deletion of root file system

Don't miss critical vulnerabilities

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiOSHeader injection in captive portal authentication form

Fortinet FortiPAMSSL-VPN Reflected XSS

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiPAMSSL-VPN Reflected XSS

Don't miss critical vulnerabilities

Fortinet FortiOSBuffer overread in authd and wad daemon

Fortinet FortiOSRestricted CLI escape using Lua

Fortinet FortiOSRestricted CLI escape using Lua

Fortinet FortiPAMPath Traversal in CLI

Fortinet FortiPAMPath Traversal in CLI

Don't miss critical vulnerabilities

Fortinet FortiOSInsertion of sensitive information into REST API logs

Fortinet FortiPAMInsertion of sensitive information into REST API logs

Fortinet FortiPAMTrusted hosts bypass via SSH

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Fortinet FortiOSOpen Redirect and XSS in Web Filter warning page

Don't miss critical vulnerabilities

Fortinet FortiOSInsertion of Sensitive 2FA Information in logs and debug command

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Fortinet FortiOSImproper autorization over static files

Fortinet FortiOSFGFM protocol allows unauthenticated reset of the connection

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Don't miss critical vulnerabilities

Fortinet FortiPAMAuthenticated Heap Overflow in SSL-VPN bookmarks

Fortinet FortiProxyDomain fronting protection bypass in explicit web proxy

Fortinet FortiOSInteger Overflow on SSL-VPN bookmarks

Fortinet FortiOSDNS type 65 resource record requests bypass DNS filter

Fortinet FortiProxyPrivilege escalation in automation-stitch

Don't miss critical vulnerabilities

Company

Resources

Contact