Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- UnknownFortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.34%Sep 11, 2026
- High8.1ZTNA Portal Improper Certificate ValidationCheck if you run itEPSS 0.28%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- Medium5.3UI DoS attackCheck if you run itEPSS 0.42%Aug 12, 2026
- High8.1Stack buffer overflow in WADCheck if you run itEPSS 0.51%Aug 12, 2026
- Medium4.1A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…Check if you run itEPSS 0.31%Jul 14, 2026
- Medium5.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…Check if you run itEPSS 0.67%Jul 14, 2026
- Medium5.0Path traversal in CLI command allows deletion of root file systemCheck if you run itEPSS 0.25%Jul 14, 2026
- High8.8A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unaut…Check if you run itEPSS 0.56%May 12, 2026
- High8.8A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiO…Check if you run itEPSS 0.28%Apr 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 1.08%Apr 14, 2026
- Medium5.9Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityPatch nowKEVEPSS 29.50%Feb 10, 2026
- UnknownFortinet FortiOS LDAP Credentials DisclosurePatch nowKEVEPSS 0.10%Feb 5, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 85.80%Jan 27, 2026
- Critical9.8Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityPatch nowKEVEPSS 3.80%Jan 13, 2026
- Medium5.6Fortinet FortiOS Insufficient Session ExpirationPatch nowKEVEPSS 0.30%Dec 9, 2025
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- UnknownFortinet FortiOS Heap-based Buffer OverflowPatch nowKEVEPSS 0.24%Oct 23, 2025
- Medium4.9An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy vCheck this weekEPSS 40.00%Jul 8, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- Medium5.6A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throuCheck if you run itEPSS 0.45%Jun 10, 2025
- Low3.9An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2 all versionsCheck this weekEPSS 55.00%Jun 10, 2025
- Low3.1An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker toCheck this weekEPSS 21.00%Jun 10, 2025
- Medium6.0An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below may allow an EAP verified remote user to connect from FortiClCheck this weekEPSS 38.00%Jun 10, 2025
49 records · page 1 of 2
PreviousNext