CyberSIXT Search
Fortinet product

Several products

← All Fortinet products

No CISA KEV deadline is open. CISA last added a Several products CVE on 16 Oct.

Tracked since 22 Jan · latest article Mon 14 Sep · RSS

Added to KEV · 90 days
2
of 7 in the full CISA catalogue · all time
High exploit odds · current
0
EPSS top 5%, not in KEV
Articles · 7 days
0
none this week

Exploited, by due date

CSV download
CVEProductAddedDue · federal deadline

Deadlines passed

CVE-2025-61624Multiple Products16 OctDeadline passed 19 Oct7 articles
CVE-2025-25249Multiple Products9 SepDeadline passed 12 Sep5 articles
CVE-2026-24858Multiple Products27 JanDeadline passed 30 Jan10 articles
CVE-2025-59718Multiple Products16 Dec 2025Deadline passed 23 Dec 20259 articles
CVE-2025-32756not in CyberSIXT coverageMultiple Products14 May 2025Deadline passed 4 Jun 2025
CVE-2024-23113not in CyberSIXT coverageMultiple Products9 Oct 2024Deadline passed 30 Oct 2024
CVE-2022-40684not in CyberSIXT coverageMultiple Products11 Oct 2022Deadline passed 1 Nov 2022Known ransomware use

Coverage

23 articles · all timeFull timeline

23 articles from 6 outlets since 22 Jan; the latest 42 days ago.

Several products: coverage over time23 articles from 6 outlets. First report 22 Jan by Security Affairs. Busiest week: 7 articles, week of 26 Jan. 0 in the last 7 days. Several products: coverage over time23 articles from 6 outlets. First report 22 Jan by Security Affairs. Busiest week: 7 articles, week of 26 Jan. 0 in the last 7 days.
  • Article
  • First report
  • Official notice
Show as table
Several products: articles
Published (UTC)OutletHeadline
Mon 14 Sep · 07:52 UTCSecurityOnlineRussian Hackers Exploit Fortinet Flaw to Deploy PivotC2 Trojan
Thu 10 Sep · 19:46 UTCSecurity AffairsCISA Flags Four Actively Exploited Flaws Including Cisco Zero Day
Thu 10 Sep · 11:36 UTCThe Hacker NewsCISA Flags Cisco, Citrix and Fortinet Flaws Under Active Attack
Thu 10 Sep · 07:00 UTCSecurityWeekFortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 Devices
Thu 10 Sep · 01:32 UTCCISACISA Flags Actively Exploited Fortinet Flaw Allowing Code Execution
Thu 12 Mar · 16:11 UTCCISASiemens RUGGEDCOM APE1808 Devices
Tue 10 Mar · 20:01 UTCSecurity AffairsAttackers exploit FortiGate devices to access sensitive network information
Tue 10 Feb · 06:35 UTCThe Hacker NewsFortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code Execution
Mon 2 Feb · 10:45 UTCSecurity AffairsSecurity Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITION
Wed 28 Jan · 21:51 UTCDark ReadingFortinet Confirms New Zero-Day Behind Malicious SSO Logins
Wed 28 Jan · 20:41 UTCSecurity AffairsU.S. CISA adds a flaw in multiple Fortinet products to its Known Exploited Vulnerabilities catalog
Wed 28 Jan · 16:41 UTCSecurity AffairsFortinet patches actively exploited FortiOS SSO auth bypass (CVE-2026-24858)
Wed 28 Jan · 08:35 UTCSecurityWeekFortinet Patches Exploited FortiCloud SSO Authentication Bypass
Wed 28 Jan · 05:20 UTCThe Hacker NewsFortinet Patches CVE-2026-24858 After Active FortiOS SSO Exploitation Detected
Wed 28 Jan · 04:15 UTCSecurityOnlineUnder Attack: Critical Fortinet Auth Bypass (CVE-2026-24858) Exploited in the Wild
Mon 26 Jan · 13:11 UTCThe Hacker News⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & More
Fri 23 Jan · 19:16 UTCSecurity AffairsFortinet warns of active FortiCloud SSO bypass affecting updated devices
Fri 23 Jan · 14:06 UTCSecurityWeekFortinet Confirms FortiCloud SSO Exploitation Against Patched Devices
Fri 23 Jan · 13:31 UTCThe Hacker NewsFortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate Firewalls
Fri 23 Jan · 05:20 UTCSecurityOnline“New” Path of Attack: Fully Upgraded Fortinet Devices Hit by SSO Exploits
Thu 22 Jan · 21:41 UTCDark ReadingFortinet Firewalls Hit With Malicious Configuration Changes
Thu 22 Jan · 12:25 UTCSecurityWeekNew Wave of Attacks Targeting FortiGate Firewalls
Thu 22 Jan · 11:20 UTCSecurity AffairsArctic Wolf detects surge in automated Fortinet FortiGate firewall configuration attacks

Who reported 6 outlets, last 12 months

  • Security Affairs7
  • The Hacker News5
  • SecurityWeek4
  • SecurityOnline3
  • Dark Reading2
  • CISA2
  1. Russian Hackers Exploit Fortinet Flaw to Deploy PivotC2 TrojanSecurityOnline
  2. CISA Flags Four Actively Exploited Flaws Including Cisco Zero DaySecurity Affairs
  3. CISA Flags Cisco, Citrix and Fortinet Flaws Under Active AttackThe Hacker News
  4. Fortinet Flaw Exploited to Deploy PivotC2 RAT Across 178 DevicesSecurityWeek
  5. CISA Flags Actively Exploited Fortinet Flaw Allowing Code ExecutionCISA · official notice
  6. Siemens RUGGEDCOM APE1808 DevicesCISA · official notice
  7. Attackers exploit FortiGate devices to access sensitive network informationSecurity Affairs
  8. Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code ExecutionThe Hacker News
  9. Security Affairs newsletter Round 561 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs
  10. Fortinet Confirms New Zero-Day Behind Malicious SSO LoginsDark Reading

All CVEs in coverage

3
CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityCVSS9.4CriticalExploited87%EPSS10articles
CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityCVSS9.1CriticalExploited68%EPSS9articles
CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityCVSS7.4HighExploited3.7%EPSS5articles
How these numbers are made

CISA KEV counts use the full catalogue, refreshed every 10 minutes. CVEs in coverage are those recorded by CyberSIXT. BOD 22-01 deadlines bind US federal civilian agencies.

CVEs with FIRST EPSS at or above the 95th percentile (top 5%), excluding CVEs in CISA KEV. EPSS estimates exploitation probability over the next 30 days.

Coverage is above its usual rate at three or more articles in 7 days and at least 2.5 times the weekly mean of the preceding 8 weeks.

Product names are grouped by normalised names, with version and edition tails removed.

Fix listed refers to an advisory. Unknown fix status is counted as not listed.

On this device

Following

Intel

VendorsThreat actorsResearch reports

Settings

CyberSIXT summarises security news every 30 minutes.
↑↓ move↵ open⌘C copy CVE IDEsc close

Keyboard shortcuts

Everything works with a mouse or touch. Shortcuts are a faster path.

Search ⌘K
Search /
Next item J
Previous item K
Go to Today GT
Go to News GN
Go to CVEs GC
Go to Briefing GB
Reduce motion on this device