Fortinet known exploited vulnerabilities
The Beam CVE database tracks 32 known exploited vulnerabilities for Fortinet: 21 critical, 5 high and 6 medium severity. The newest is CVE-2026-104286, published Oct 1, 2026.
These are the Fortinet vulnerabilities in CISA’s Known Exploited Vulnerabilities catalog: flaws with confirmed exploitation in the wild. Each entry links the vendor bulletin and CISA’s required action.
- Vulnerabilities tracked
- 32
- Critical
- 21
- Known exploited (CISA KEV)
- 32
- Published in the last 30 days
- 1
All entries, newest first
CVE-2026-104286
Fortinet FortiMail Path Traversal Vulnerability
critical9.8ExploitedOct 1, 2026CVE-2026-25089
Fortinet FortiSandbox OS Command Injection Vulnerability
critical9.8ExploitedJun 9, 2026CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
medium6.5ExploitedApr 14, 2026CVE-2026-39808
Fortinet FortiSandbox OS Command Injection Vulnerability
critical9.8ExploitedApr 14, 2026CVE-2026-35616
Fortinet FortiClient EMS Improper Access Control Vulnerability
critical9.8ExploitedApr 4, 2026CVE-2025-68686
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
medium5.9ExploitedFeb 10, 2026CVE-2026-21643
Fortinet FortiClient EMS SQL Injection Vulnerability
critical9.8ExploitedFeb 6, 2026CVE-2026-24858
Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
critical9.8ExploitedJan 27, 2026CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
critical9.8ExploitedJan 13, 2026CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
critical9.8ExploitedDec 9, 2025CVE-2025-58034
Fortinet FortiWeb OS Command Injection Vulnerability
high7.2ExploitedNov 18, 2025CVE-2025-64446
Fortinet FortiWeb Path Traversal Vulnerability
critical9.8ExploitedNov 14, 2025CVE-2025-25257
Fortinet FortiWeb SQL Injection Vulnerability
critical9.8ExploitedJul 17, 2025CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
critical9.8ExploitedMay 13, 2025CVE-2025-24472
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
high8.1ExploitedFeb 11, 2025CVE-2024-55591
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
critical9.8ExploitedJan 14, 2025CVE-2024-47575
Fortinet FortiManager Missing Authentication Vulnerability
critical9.8ExploitedOct 23, 2024CVE-2023-48788
Fortinet FortiClient EMS SQL Injection Vulnerability
critical9.8ExploitedMar 12, 2024CVE-2024-23113
Fortinet Multiple Products Format String Vulnerability
critical9.8ExploitedFeb 15, 2024CVE-2024-21762
Fortinet FortiOS Out-of-Bound Write Vulnerability
critical9.8ExploitedFeb 9, 2024CVE-2023-27997
Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
critical9.8ExploitedJun 13, 2023CVE-2022-41328
Fortinet FortiOS Path Traversal Vulnerability
high7.1ExploitedMar 7, 2023CVE-2022-42475
Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
critical9.8ExploitedJan 2, 2023CVE-2022-40684
Fortinet Multiple Products Authentication Bypass Vulnerability
critical9.8ExploitedOct 18, 2022CVE-2021-44168
Fortinet FortiOS Arbitrary File Download
high7.8ExploitedJan 4, 2022CVE-2019-5591
Fortinet FortiOS Default Configuration Vulnerability
medium6.5ExploitedAug 14, 2020CVE-2020-12812
Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
critical9.8ExploitedJul 24, 2020CVE-2019-6693
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
medium6.5ExploitedNov 21, 2019CVE-2018-13379
Fortinet FortiOS SSL VPN Path Traversal Vulnerability
critical9.8ExploitedJun 4, 2019CVE-2018-13382
Fortinet FortiOS and FortiProxy Improper Authorization
high7.5ExploitedJun 4, 2019CVE-2018-13383
Fortinet FortiOS and FortiProxy Out-of-bounds Write
medium6.5ExploitedMay 29, 2019CVE-2018-13374
Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
medium4.3ExploitedJan 22, 2019
