https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-48887.htmlhttps://patchthecve.com/cve/CVE-2024-48887.htmlWed, 17 Jun 2026 07:58:58 +0000CRITICAL 9.8: A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted requesthttps://patchthecve.com/cve/CVE-2023-25610.htmlhttps://patchthecve.com/cve/CVE-2023-25610.htmlWed, 17 Jun 2026 05:41:36 +0000CRITICAL 9.8: A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, versionhttps://patchthecve.com/cve/CVE-2023-37937.htmlhttps://patchthecve.com/cve/CVE-2023-37937.htmlWed, 17 Jun 2026 06:08:56 +0000HIGH 7.8: An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code orhttps://patchthecve.com/cve/CVE-2023-37936.htmlhttps://patchthecve.com/cve/CVE-2023-37936.htmlWed, 17 Jun 2026 06:08:56 +0000CRITICAL 9.8: A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0 through 6.2.7 and 6.0.0 through 6.0.7 allows attacker to execute unauthorized code or commands via crafted requests.