Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Low2.3Double free in signal handlerCheck if you run itEPSS 0.10%Oct 13, 2026
- High8.1ZTNA Portal Improper Certificate ValidationCheck if you run itEPSS 0.28%Sep 8, 2026
- Low2.7Null Pointer Dereference in Log ReportCheck if you run itEPSS 1.07%Sep 8, 2026
- Medium4.1A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4…Check if you run itEPSS 0.31%Jul 14, 2026
- Medium5.9A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions,…Check if you run itEPSS 0.67%Jul 14, 2026
- Medium5.0Path traversal in CLI command allows deletion of root file systemCheck if you run itEPSS 0.25%Jul 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityPatch nowKEVEPSS 1.08%Apr 14, 2026
- Critical9.8Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel VulnerabilityPatch nowKEVEPSS 85.80%Jan 27, 2026
- Critical9.8Fortinet Multiple Products Improper Verification of Cryptographic Signature VulnerabilityPatch nowKEVEPSS 68.29%Dec 9, 2025
- Medium4.9An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy vCheck this weekEPSS 40.00%Jul 8, 2025
- UnknownFortinet fortiswitchmanager Relative Path TraversalPatch nowKEVEPSS 0.93%Jun 29, 2025
- Medium5.6A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throuCheck if you run itEPSS 0.45%Jun 10, 2025
- Low3.1An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker toCheck this weekEPSS 21.00%Jun 10, 2025
- Medium6.5An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7Check this weekEPSS 85.00%Jun 10, 2025
- Medium4.4An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions mCheck if you run itEPSS 1.16%Jun 10, 2025
- Critical9.0A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and vCheck this weekEPSS 94.00%May 28, 2025
- High8.1Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 7.23%Feb 11, 2025
- Critical9.8Fortinet FortiOS and FortiProxy Authentication Bypass VulnerabilityPatch nowKEVEPSS 94.15%Jan 14, 2025
- UnknownFortinet FortiOS and FortiProxy Backup File Weak Key VulnerabilityPatch nowKEVEPSS 3.47%Jun 13, 2024
- Critical9.8Fortinet Multiple Products Format String VulnerabilityPatch nowKEVEPSS 61.72%Feb 15, 2024
- Critical9.8Fortinet FortiOS Out-of-Bound Write VulnerabilityPatch nowKEVEPSS 83.43%Feb 8, 2024
- Critical9.8Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 85.69%Jun 12, 2023
- Critical9.8Fortinet FortiOS Heap-Based Buffer Overflow VulnerabilityPatch nowKEVEPSS 99.47%Dec 12, 2022
- Critical9.8Fortinet Multiple Products Authentication Bypass VulnerabilityPatch nowKEVEPSS 99.98%Oct 10, 2022
- High7.5Fortinet FortiOS and FortiProxy Improper AuthorizationPatch nowKEVEPSS 81.69%Jun 4, 2019
27 records · page 1 of 2
PreviousNext