Vendor: fortinet

Arbitrary log file read in administrative interface

2026-05-12 FG-IR-26-138

Command injection in CLI

2026-05-12 FG-IR-26-131

DoS due to unsafe function in signal handler

2026-05-12 FG-IR-26-137

Hardcoded Encryption Key Used for VPN Saved Passwords

2026-05-12 FG-IR-26-129

Improper access control on API endpoints

2026-05-12 FG-IR-26-128

Incorrect global authorization

2026-05-12 FG-IR-26-136

OS command injection in CLI

2026-05-12 FG-IR-26-133

OTP Disclosure via Exported TokenContentProvider

2026-05-12 FG-IR-26-130

Out-of-bounds access in CAPWAP daemon

2026-05-12 FG-IR-26-123

SQL command injection in administrative portal

2026-05-12 FG-IR-26-132

User controlled SQL commands

2026-05-12 FG-IR-26-134

Out-Of-Bounds Write in administrative interface

2026-04-15 FG-IR-26-127

2FA request can be replayed without a valid token after one successful request

2026-04-14 FG-IR-26-101

Arbitrary directory delete on vmimages delete feature

2026-04-14 FG-IR-26-115

Axios npm Package Compromised

2026-04-14 FG-IR-26-126

Clear-text credentials retrievable with IP modification for connectors

2026-04-14 FG-IR-26-104

Clear-text credentials retrievable with IP modification for LDAP

2026-04-14 FG-IR-26-105

Cleartext Credentials in response for API endpoints

2026-04-14 FG-IR-26-106

Credential disclosure in LDAP configuration web page.

2026-04-14 FG-IR-26-113

Hardcoded symmetric encryption key for Postgresql

2026-04-14 FG-IR-26-107

Heap-based buffer overflow in oftpd daemon

2026-04-14 FG-IR-26-121

Integer Overflow Denial of Service in administrative interface

2026-04-14 FG-IR-26-108

Missing Authentication for critical function in CAPWAP daemon

2026-04-14 FG-IR-26-125

Multiple Path traversals in CLI

2026-04-14 FG-IR-26-114

Multiple SQL Injections

2026-04-14 FG-IR-26-102

Multiple Stored XSS

2026-04-14 FG-IR-26-110

Open Redirection via Import CSV option

2026-04-14 FG-IR-26-118

OS Command Injection through API endpoint

2026-04-14 FG-IR-26-100

Path Traversal in CLI

2026-04-14 FG-IR-26-120

Path Traversal in CLI

2026-04-14 FG-IR-26-122

Path Traversal on File Content Extraction connector

2026-04-14 FG-IR-26-116

Reflected XSS in Operation Center

2026-04-14 FG-IR-26-109

SQL Injection via API

2026-04-14 FG-IR-26-119

SQL Injection via JSON RPC API

2026-04-14 FG-IR-26-111

SSRF via Report template and scheduling

2026-04-14 FG-IR-26-103

Stored Cross Site Scripting (XSS) in Reports View page

2026-04-14 FG-IR-26-117

Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox

2026-04-14 FG-IR-26-112

unauthorized backup file access

2026-04-14 FG-IR-26-124

Fortinet FortiClient EMS SQL Injection Vulnerability

2026-04-13 CVE-2026-21643

highFortinet CISA KEV 2026-W16

Fortinet FortiClient EMS Improper Access Control Vulnerability

2026-04-06 CVE-2026-35616

highFortinet CISA KEV 2026-W15

API authentication and authorization bypass

2026-04-04 FG-IR-26-099

mediumFortinet Fortinet 2026-W14

Arbitrary file deletion in administrative interface

2026-03-10 FG-IR-26-094

Authentication Lockout Bypass via Race Condition

2026-03-10 FG-IR-26-079

Authentication rate-limit bypass permits to brute force admin logins

2026-03-10 FG-IR-26-082

Buffer Overflow in LLDP OUI field

2026-03-10 FG-IR-26-086

Buffer overflow via fgtupdates service

2026-03-10 FG-IR-26-098

Format string vulnerability in fazsvcd

2026-03-10 FG-IR-26-092

OS command injection on vmimages update feature

2026-03-10 FG-IR-26-096