Vendor
Fortinet
- CVEs tracked · all time
- 41
- in CISA KEV · all time
- 21
- articles · since 11 Sep
- 28
- articles · all time
- 104
28 articles since 11 Sep; 2 CISA notices, marked below the bars.
Show as table
| Day (UTC) | Articles |
|---|---|
| Mon 14 Sep | 1 |
| Tue 15 Sep | 1 |
| Thu 1 Oct | 2 |
| Fri 2 Oct | 3 |
| Mon 5 Oct | 1 |
| Mon 12 Oct | 1 |
| Tue 13 Oct | 1 |
| Wed 14 Oct | 2 |
| Thu 15 Oct | 2 |
| Fri 16 Oct | 4 |
| Sat 17 Oct | 1 |
| Mon 19 Oct | 1 |
| Tue 20 Oct | 3 |
| Fri 23 Oct | 5 |
Products: FortiAnalyzer Cloud, FortiAuthenticator, FortiClient EMS, FortiClientEMS and 19 more
FortiAnalyzer CloudFortiAuthenticatorFortiClient EMSFortiClientEMSFortiClientWindowsFortiGateFortiMailFortiManagerFortiManager CloudFortinet FortiOS, FortiProxyFortiOSFortiOS and FortiProxyFortiOS and FortiProxy SSL-VPNFortiOS-6K7KFortiPAMFortiProxyFortiSandboxFortiSandbox CloudFortiSandbox PaaSFortiSIEMFortiSwitchManagerFortiWebMultiple Products
CVEs
41 CVEs, the 40 listed known exploited firstCVE-2026-35616Fortinet FortiClient EMS Improper Access Control VulnerabilityCVSS9.1CriticalExploited94%EPSS15articles
CVE-2025-64446Fortinet FortiWeb Path Traversal VulnerabilityCVSS9.4CriticalExploited92%EPSS2articles
CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials VulnerabilityCVSS6.5MediumExploited6.6%EPSS1article
CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityCVSS9.6CriticalExploited94%EPSS5articles
CVE-2024-47575Fortinet FortiManager Missing Authentication VulnerabilityCVSS9.8CriticalExploited95%EPSS5articles
CVE-2025-61624Fortinet Multiple Products Path Traversal VulnerabilityCVSS5.4MediumExploited1.3%EPSS7articles
CVE-2025-25257Fortinet FortiWeb SQL Injection VulnerabilityCVSS9.6CriticalExploited99.9%EPSS2articles
CVE-2026-39808Fortinet FortiSandbox OS Command Injection VulnerabilityCVSS9.1CriticalExploited47%EPSS12articles
CVE-2026-104286Fortinet FortiMail Path Traversal VulnerabilityCVSS9.8CriticalExploited4.6%EPSS6articles
CVE-2024-21762Fortinet FortiOS Out-of-Bound Write VulnerabilityCVSS9.6CriticalExploited83%EPSS1article
CVE-2022-42475Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityCVSS9.3CriticalExploited99.4%EPSS1article
CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityCVSS9.2CriticalExploited86%EPSS1article
28 more CVEs
CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal VulnerabilityCVSS9.1CriticalExploited99.9%EPSS1article
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityCVSS7.4HighExploited3.8%EPSS5articles
CVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityCVSS8.1HighExploited7.2%EPSS1article
CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityCVSS5.3MediumExploited30%EPSS5articles
CVE-2026-25089Fortinet FortiSandbox OS Command Injection VulnerabilityCVSS9.1CriticalExploited76%EPSS13articles
CVE-2026-21643Fortinet FortiClient EMS SQL Injection VulnerabilityCVSS9.1CriticalExploited98%EPSS12articles
CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS9.4CriticalExploited87%EPSS10articles
CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityCVSS9.1CriticalExploited68%EPSS9articles
CVE-2026-84388Fortinet FortiPAM Chrome Extension vulnerabilityCVSS9.1Critical–Not in KEV0.4%EPSS1article
- AI Agents Power Ransomware Affiliates’ Attacks on Edge DevicesThe Hacker News
- Hackers Target Exposed Fortinet and Palo Alto Firewalls in Global CampaignThe Hacker News
- INC Ransomware Exposed Using AI and Custom Malware Against VictimsSecurityOnline
- Hackers Steal 70,000 Credentials in Fortinet and Palo Alto AttacksSecurityOnline
- FortiSIEM flaw lets unauthenticated attackers execute code as adminsSecurityOnline
- FortiSIEM flaw lets unauthenticated attackers execute code remotelyThe Hacker News
- Japan’s October Breach Wave Exposes Millions of Customer RecordsSOCRadar
- AI-Driven Ransomware Campaign Targeted 62 OrganisationsSOCRadar
- Fortinet Flaw Exploits Led to Stealthy FortiGate Implant in Telecom BreachSecurityWeek
- CISA Flags Fortinet and BeyondTrust Flaws Under Active AttackSecurity Affairs
- CISA Flags Fortinet Path Traversal Flaw Under Active ExploitationCISA · official notice
- Hackers Stole Fortinet Credentials from 500 Firewalls via FortiManagerSecurity Affairs
- Espionage Group Exploits WinRAR Flaw to Target CIS GovernmentsSecurityOnline
- Fortinet flaw lets stealthy PEERSTITCH malware hijack firewall processesThe Hacker News
- Silent Lynx Exploits WinRAR Flaw in Attacks on CIS GovernmentsThe Hacker News
- Hackers Used FortiManager Flaws to Compromise 500 FirewallsSecurityOnline
- Hackers Stole Configurations for 500 FortiGate Firewalls in FortiManager BreachUnit 42
- Citrix, Fortinet and Ivanti Patch Critical Flaws, Exploited Zero DaySecurityWeek
- Fortinet Patches Critical Flaws Enabling Unauthenticated Remote AttacksSecurityOnline
- Actively Exploited Vulnerabilities Jump to 100 in Q3 2026SecurityOnline
- Seven Newly Exploited Flaws Put Cisco, MediaWiki and Zammad at RiskSecurityOnline
- Fortinet FortiMail Zero Day Lets Attackers Write Files via HTTPSecurityWeek
- Fortinet FortiMail Zero Day Exploited in Attacks, CISA WarnsThe Hacker News
- CISA Warns FortiMail Flaw Is Being Exploited in the WildSecurity Affairs
- FortiMail Flaw Exploited in the Wild, Exposing Corporate NetworksSecurityOnline
- CISA Flags Fortinet FortiMail Flaw Under Active ExploitationCISA · official notice
- Attackers Exploited Fortinet and F5 Flaws to Target Thai ISP 3BBSecurityWeek
- Russian Hackers Exploit Fortinet Flaw to Deploy PivotC2 TrojanSecurityOnline
- CISA Flags Four Actively Exploited Flaws Including Cisco Zero DaySecurity Affairs
- CISA Flags Cisco, Citrix and Fortinet Flaws Under Active AttackThe Hacker News
- Fortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 DevicesSecurityWeek
- CISA Flags Actively Exploited Fortinet Flaw Allowing Code ExecutionCISA · official notice
- Fortinet Patches Critical Flaws Enabling JWT Bypass and Traffic HijackingSecurityWeek
- Fortinet Patches Flaws Let Attackers Bypass Auth and Reroute TrafficSecurityOnline
- Gentlemen Ransomware Storms Networks Through Fortinet VPNsSecurityOnline
- Fortinet patches CVE-2026-26035 auth bypass in FortiWebSecurityWeek
- Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFADark Reading
- U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs
- Fortinet FortiOS bug CVE-2025-68686 exposes data to hackersCISA · official notice
- CISA adds FortiOS info leak CVE-2025-68686 to KEV, urges patchCISA · official notice
- CISA adds Arista VeloCloud RCE and Fortinet FortiOS bypass to KEVSecurityOnline
- CISA urges patch of FortiSandbox, SharePoint flaws amid exploitsSecurity Affairs
- Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root PrivilegesSecurityOnline
- CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet VulnerabilitiesInfosecurity
- 292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows UsersSecurityOnline
- Red Hat OpenShift AI flaw lets attackers read local filesSecurityOnline
- CISA orders urgent patches for SharePoint, FortiSandbox flawsSecurityOnline
- CISA KEV Catalogue Adds FortiSandbox Flaw CVE-2026-25089CISA · official notice
- CISA adds FortiSandbox flaw CVE-2026-39808 to KEV catalogueCISA · official notice
- CISA Adds CVE-2026-39808 to Known Exploited Vulnerabilities CatalogueCISA · official notice
The latest 50 are listed. Every article is in the RSS feed.