fortinet Vulnerability Advisory Catalog

Total 1,118 security vulnerabilities recorded for fortinet software and firmware.

← Back to All Vendors
Component: fortimail

An improper neutralization of special elements used in an SQL Command ("SQL Injection&") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7....

📅 2026-05-12
CVSS 7.2 Dossier →
Component: fortiap

An improper neutralization of special elements used in an OS command ("OS Command Injection") vulnerability [CWE-78] vulnerability in Fortinet FortiAP...

📅 2026-05-12
CVSS 6.7 Dossier →
Component: fortiweb

An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 th...

📅 2026-04-14
CVSS 7.2 Dossier →
Component: fortiddos-f

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F 7.2.1 through 7.2.2 may a...

📅 2026-04-14
CVSS 8.8 Dossier →
Component: fortiweb

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.1 through 7.4.12, FortiWe...

📅 2026-04-14
CVSS 6.7 Dossier →
CVE-2026-39813 CRITICAL
Component: fortisandbox

A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attacker to esca...

📅 2026-04-14
CVSS 9.8 Dossier →
Component: fortisandbox

A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, For...

📅 2026-04-14
CVSS 4.8 Dossier →
Component: fortiweb

A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4 all versions, Fort...

📅 2026-04-14
CVSS 4.9 Dossier →
Component: forticlientems

A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to information disclosure via de...

📅 2026-04-14
CVSS 6.0 Dossier →
Component: forticlientems

A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5, F...

📅 2026-04-14
CVSS 6.7 Dossier →
CVE-2026-39808 CRITICAL
Component: fortisandbox

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4....

📅 2026-04-14
CVSS 9.8 Dossier →
Component: fortisandbox

A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versions, FortiSandbox PaaS 5....

📅 2026-04-14
CVSS 2.7 Dossier →
Component: fortisandbox

A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSand...

📅 2026-04-14
CVSS 6.7 Dossier →
Component: fortisoar

A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOAR on-premise 7.6.0...

📅 2026-04-14
CVSS 7.5 Dossier →
Component: fortianalyzer_cloud

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 through 7.6.4 may allow a rem...

📅 2026-04-14
CVSS 8.1 Dossier →
Component: fortisoar

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOA...

📅 2026-04-14
CVSS 4.3 Dossier →
Component: fortisoar

A storing passwords in a recoverable format vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.4, FortiSOAR PaaS 7.5.0 through 7.5.2, FortiSOA...

📅 2026-04-14
CVSS 4.1 Dossier →
Component: fortisoar

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiS...

📅 2026-04-14
CVSS 6.5 Dossier →
Component: fortisoar

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, Fo...

📅 2026-04-14
CVSS 6.5 Dossier →
Component: fortisoar

An improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, ...

📅 2026-04-14
CVSS 4.6 Dossier →
Component: fortisoar

A cleartext transmission of sensitive information vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, Fo...

📅 2026-04-14
CVSS 5.7 Dossier →
Component: fortinac-f

An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 through 7.6.5, FortiNAC-F 7....

📅 2026-04-14
CVSS 2.4 Dossier →
Component: fortimanager_cloud

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAn...

📅 2026-04-14
CVSS 6.0 Dossier →
Component: fortisandbox

An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiSandbox ...

📅 2026-04-14
CVSS 5.4 Dossier →
Page 2 of 47 (1,118 Total Records)