Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- UnknownUnauthenticated Control of NAT Rules Leading to Exposure of Sensitive InformationCheck if you run itEPSS 0.39%Sep 8, 2026
- UnknownWorkflow session email approval process bypassCheck if you run itEPSS 0.24%Sep 8, 2026
- Medium5.3UI DoS attackCheck if you run itEPSS 0.42%Aug 12, 2026
- High8.1Stack buffer overflow in WADCheck if you run itEPSS 0.51%Aug 12, 2026
- UnknownFGFM Authentication Weakening via CLI ConfigurationCheck if you run itEPSS 0.46%Aug 12, 2026
- UnknownServer-Side Request Forgery (SSRF)Check if you run itEPSS 0.26%Aug 12, 2026
- UnknownHeap overflow in kernel driver due to missing size validationCheck if you run itEPSS 0.52%Aug 12, 2026
- UnknownBroken access control in the RADIUS type admin groupCheck if you run itEPSS 0.75%Aug 12, 2026
- UnknownOut of bounds read in GUICheck if you run itEPSS 0.53%Jul 22, 2026
- UnknownCVE-2025-43892 is listed by Buffer overread in authd and wad daemon.Check if you run itEPSS 0.38%Jul 16, 2026
- Medium4.1A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…Check if you run itEPSS 0.31%Jul 14, 2026
- Medium5.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…Check if you run itEPSS 0.67%Jul 14, 2026
- Medium5.0Path traversal in CLI command allows deletion of root file systemCheck if you run itEPSS 0.25%Jul 14, 2026
- UnknownCross-Site Scripting in Domain parameterCheck if you run itEPSS 0.24%Jul 14, 2026
- UnknownMissed certificate verification in AD Connector communication with FortiClient EMSCheck if you run itEPSS 0.22%Jul 14, 2026
- UnknownSSL-VPN Reflected XSSCheck if you run itEPSS 0.39%Jul 14, 2026
- UnknownHeader injection in captive portal authentication formCheck if you run itEPSS 0.37%Jul 14, 2026
- UnknownHeader injection in Web Filter warning pageCheck if you run itEPSS 0.27%Jul 14, 2026
- Critical9.8Fortinet FortiSandbox OS Command Injection VulnerabilityPatch nowKEVEPSS 76.11%Jun 9, 2026
- Medium5.5An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroi…Check if you run itEPSS 0.14%May 12, 2026
- Medium5.5A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to infor…Check if you run itEPSS 0.14%May 12, 2026
- Critical9.8A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8, FortiAuthenticator 6.5.…Check if you run itEPSS 0.48%May 12, 2026
- Critical9.8A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSandbox Cloud 5.0.2 through 5.0.5, FortiSand…Check if you run itEPSS 0.50%May 12, 2026
- Medium6.5An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor 6.0.0 through 6.0.2, FortiDeceptor 5.3.0…Check if you run itEPSS 0.33%May 12, 2026
- High8.8An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0 through…Check if you run itEPSS 0.26%May 12, 2026