Fortios
306 CVEs tracked. 20 of them are in CISA KEV.
This hub aggregates every CVE we track for Fortios, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Fortios CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 3 |
| 2024-12 | 2 |
| 2025-01 | 17 |
| 2025-02 | 4 |
| 2025-03 | 7 |
| 2025-04 | 5 |
| 2025-05 | 5 |
| 2025-06 | 7 |
| 2025-07 | 3 |
| 2025-08 | 4 |
| 2025-09 | 0 |
| 2025-10 | 16 |
| 2025-11 | 3 |
| 2025-12 | 5 |
| 2026-01 | 2 |
| 2026-02 | 6 |
| 2026-03 | 0 |
| 2026-04 | 2 |
| 2026-05 | 1 |
| 2026-06 | 1 |
| 2026-07 | 7 |
| 2026-08 | 3 |
| 2026-09 | 2 |
Severity
How the 306 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical26
- High67
- Medium179
- Low34
Latest CVEs
The 15 most recently published vulnerabilities affecting Fortios.
- CVE-2026-84392A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions...2.7
- CVE-2026-84393A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.6 may allow attacker to information disclosure via <inser...8.1
- CVE-2026-70466A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all v...5.3
- CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute...5.6
- CVE-2026-71408A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of serv...5.3
- CVE-2026-59840A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0...4.3
- CVE-2025-43892A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an auth...4.3
- CVE-2026-23573An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, Forti...6.1
- CVE-2026-59839A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiO...5.5
- CVE-2025-62826An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, For...3.1
- CVE-2025-62675An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, For...3.4
- CVE-2026-59837A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, Fo...6.6
- CVE-2025-67862An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7....6.7
- CVE-2025-53844A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via s...8.8
- CVE-2025-61624An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versio...6.0
Product grouping is registry-driven, with AI assist and human review. How it works