KEVWire

Security intelligence, with context.

CISA KEV by vendor

Fortinet known exploited vulnerabilities

CISA's Known Exploited Vulnerabilities catalog lists 32 Fortinet vulnerabilities: 12 added in the last 365 days, 21 rated critical (CVSS 9 or higher), and 14 with known ransomware use. The most recent was added Oct 16, 2026.

RSS feed for Fortinet exploited vulnerabilities · Search them on KEVWire · Ask your AI assistant

Added to KEVCVEVulnerabilityCVSSEPSSFederal due dateRansomware use
2026-10-16CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability5.4 (v3.1)1.3%2026-10-19Unknown
2026-10-01CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability9.8 (v3.1)4.6%2026-10-04Unknown
2026-09-09CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability7.4 (v3.1)3.7%2026-09-12Unknown
2026-07-27CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability5.3 (v3.1)29.5%2026-08-10Unknown
2026-07-16CVE-2026-25089Fortinet FortiSandbox OS Command Injection Vulnerability9.1 (v3.1)76.1%2026-07-19Unknown
2026-07-16CVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability9.1 (v3.1)93.2%2026-07-19Unknown
2026-04-13CVE-2026-21643Fortinet FortiClient EMS SQL Injection Vulnerability9.1 (v3.1)97.7%2026-04-16Unknown
2026-04-06CVE-2026-35616Fortinet FortiClient EMS Improper Access Control Vulnerability9.1 (v3.1)94.0%2026-04-09Unknown
2026-01-27CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability9.4 (v3.1)86.6%2026-01-30Unknown
2025-12-16CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability9.1 (v3.1)68.3%2025-12-23Unknown
2025-11-18CVE-2025-58034Fortinet FortiWeb OS Command Injection Vulnerability6.7 (v3.1)54.7%2025-11-25Unknown
2025-11-14CVE-2025-64446Fortinet FortiWeb Path Traversal Vulnerability9.4 (v3.1)91.1%2025-11-21Unknown
2025-07-18CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability9.6 (v3.1)>99.9%2025-08-08Unknown
2025-06-25CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability6.5 (v3.1)6.6%2025-07-16Known
2025-05-14CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability9.6 (v3.1)30.9%2025-06-04Unknown
2025-03-18CVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability8.1 (v3.1)7.2%2025-04-08Known
2025-01-14CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability9.6 (v3.1)94.3%2025-01-21Known
2024-10-23CVE-2024-47575FortiManager missing authentication in device management9.8 (v3.1)94.8%2024-11-13Unknown
2024-10-09CVE-2024-23113Fortinet Multiple Products Format String Vulnerability9.8 (v3.1)61.7%2024-10-30Unknown
2024-03-25CVE-2023-48788Fortinet FortiClient EMS SQL Injection Vulnerability9.3 (v3.1)98.4%2024-04-15Known
2024-02-09CVE-2024-21762Fortinet FortiOS Out-of-Bound Write Vulnerability9.6 (v3.1)84.6%2024-02-16Known
2023-06-13CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability9.8 (v3.1)85.7%2023-07-04Known
2023-03-14CVE-2022-41328Fortinet FortiOS Path Traversal Vulnerability6.7 (v3.1)10.7%2023-04-04Unknown
2022-12-13CVE-2022-42475Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability9.8 (v3.1)99.5%2023-01-03Known
2022-10-11CVE-2022-40684Fortinet Multiple Products Authentication Bypass Vulnerability9.8 (v3.1)>99.9%2022-11-01Known
2022-09-08CVE-2018-13374Fortinet FortiOS and FortiADC Improper Access Control Vulnerability4.3 (v3.1)38.1%2022-09-29Known
2022-01-10CVE-2018-13382Fortinet FortiOS and FortiProxy Improper Authorization9.1 (v3.1)81.7%2022-07-10Known
2022-01-10CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds Write4.3 (v3.1)33.6%2022-07-10Known
2021-12-10CVE-2021-44168Fortinet FortiOS Arbitrary File Download3.3 (v3.1)0.9%2021-12-24Unknown
2021-11-03CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal Vulnerability9.1 (v3.1)>99.9%2022-05-03Known
2021-11-03CVE-2019-5591Fortinet FortiOS Default Configuration Vulnerability6.5 (v3.1)18.6%2022-05-03Known
2021-11-03CVE-2020-12812Fortinet FortiOS SSL VPN Improper Authentication Vulnerability9.8 (v3.1)45.4%2022-05-03Known