PatchTheCEVCVEs published by Fortinet, Inc.
CVEs published by Fortinet, Inc. (CVE Numbering Authority). 14 tracked.
- CVE-2025-57739 HIGH 8.8 An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89]
- CVE-2026-26035 CRITICAL 9.8 UPGRADE An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, For
- CVE-2026-70465 HIGH 8.1 UPGRADE A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClient
- CVE-2026-70468 HIGH 8.1 UPGRADE UPGRADE A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, Forti
- CVE-2026-71407 MEDIUM 5.6 UPGRADE A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 ma
- CVE-2026-71408 MEDIUM 5.3 UPGRADE A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6,
- CVE-2026-70466 MEDIUM 5.3 UPGRADE A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0
- CVE-2026-70467 LOW 3.8 UPGRADE A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2,
- CVE-2026-23705 HIGH 7.2 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]
- CVE-2024-21762 CRITICAL 9.8 EXPLOITED UPGRADE UPGRADE Fortinet FortiOS Out-of-Bound Write Vulnerability
- CVE-2026-23706 MEDIUM 6.5 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89]
- CVE-2025-61624 MEDIUM 6.0 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Path Traversal Vulnerability
- CVE-2026-104286 CRITICAL 9.8 EXPLOITED UPGRADE Fortinet FortiMail Path Traversal Vulnerability
- CVE-2025-25249 HIGH 8.1 EXPLOITED UPGRADE UPGRADE Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability