Skip to content
Fencer Intel

All · Fortinet

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2025-25256 An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Forti…
    Fortinet
    EPSS 67.3% chance of exploitation in 30 days, percentile 99.3%
  2. 4.4
    CVE-2024-40588 Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiC…
    Fortinet
  3. 4.3
    CVE-2024-32124 An improper access control vulnerability [CWE-284] in FortiIsolator version 2.4.4, version 2.4.3, 2.3 all versions logging component may al…
    Fortinet
  4. 6.7
    CVE-2024-27779 An insufficient session expiration vulnerability [CWE-613] in FortiSandbox FortiSandbox version 4.4.4 and below, version 4.2.6 and below, 4…
    Fortinet
  5. 9.8
    CVE-2025-25257 An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet Fo…
    Fortinet
    kev 1 public exploit EPSS 99.9% chance of exploitation in 30 days, percentile 99.9%
  6. 4.2
    CVE-2025-24477 A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.…
    Fortinet
  7. 7.2
    CVE-2024-52965 A missing critical step in authentication vulnerability [CWE-304] in Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2…
    Fortinet
  8. 2.7
    CVE-2025-24474 An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 throug…
    Fortinet
  9. 5.3
    CVE-2024-55599 An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all ve…
    Fortinet
  10. 5.9
    CVE-2024-50568 A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and befor…
    Fortinet
  11. 4.3
    CVE-2025-25250 An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.…
    Fortinet
  12. 3.2
    CVE-2023-29184 An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.…
    Fortinet
  13. 4.3
    CVE-2023-48786 A server-side request forgery vulnerability [CWE-918] in Fortinet FortiClientEMS version 7.4.0 through 7.4.2 and before 7.2.6 may allow an…
    Fortinet
  14. 6.5
    CVE-2025-24471 An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP ver…
    Fortinet
  15. 6.6
    CVE-2025-22254 An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6…
    Fortinet
  16. 6.3
    CVE-2025-22256 A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0, 1.1.0 through 1.1.2,…
    Fortinet
  17. 4.8
    CVE-2024-32119 An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated atta…
    Fortinet
  18. 7.2
    CVE-2025-31104 A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiADC 7.6.0 throu…
    Fortinet
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  19. 3.1
    CVE-2025-22251 An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 a…
    Fortinet
  20. 4.8
    CVE-2024-50562 An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and be…
    Fortinet
    1 public exploit EPSS 1.2% chance of exploitation in 30 days, percentile 68%
  21. 4.8
    CVE-2024-54019 A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0…
    Fortinet
  22. 4.3
    CVE-2024-45329 A authorization bypass through user-controlled key in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0…
    Fortinet
  23. 2.3
    CVE-2025-46777 A insertion of sensitive information into log file in Fortinet FortiPortal versions 7.4.0, versions 7.2.0 through 7.2.5, and versions 7.0.0…
    Fortinet
  24. 4.8
    CVE-2025-24473 A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2…
    Fortinet
  25. 9.8
    CVE-2025-22252 A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and F…
    Fortinet
  26. 5.3
    CVE-2025-47294 A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthe…
    Fortinet
  27. 2.3
    CVE-2024-54020 A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated…
    Fortinet
  28. 3.7
    CVE-2025-47295 A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may al…
    Fortinet
  29. 7.8
    CVE-2025-25251 An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may al…
    Fortinet
  30. 9.8
    CVE-2025-32756 A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versio…
    Fortinet
    kev EPSS 30.9% chance of exploitation in 30 days, percentile 98%