Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2025-68686 KEV |
|
[KEV] Information Disclosure in Fortinet fortios (CVE-2025-68686)
vulnerability in Fortinet fortios (CVE-2025-68686). Confidential information can be exposed externally. Listed in CISA KEV — actively exploited.
|
| CVE-2026-39808 KEV |
|
[KEV] OS Command Injection in Fortinet fortisandbox (CVE-2026-39808)
OS command injection in Fortinet fortisandbox (CVE-2026-39808). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-59838 |
|
Vulnerability in fortinet (CVE-2026-59838)
vulnerability in fortinet (CVE-2026-59838). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59841 |
|
Vulnerability in fortinet (CVE-2026-59841)
vulnerability in fortinet (CVE-2026-59841). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59840 |
|
Vulnerability in fortinet (CVE-2026-59840)
vulnerability in fortinet (CVE-2026-59840). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-59839 |
|
Path Traversal in path-traversal (CVE-2026-59839)
path traversal in path-traversal (CVE-2026-59839). Data can be tampered with by attackers.
|
| CVE-2026-59837 |
|
Vulnerability in fortinet (CVE-2026-59837)
vulnerability in fortinet (CVE-2026-59837). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59836 |
|
Vulnerability in fortinet (CVE-2026-59836)
vulnerability in fortinet (CVE-2026-59836). Successful exploitation can lead to full system takeover.
|
| CVE-2026-59835 |
|
Vulnerability in fortinet (CVE-2026-59835)
vulnerability in fortinet (CVE-2026-59835). Confidential information can be exposed externally.
|
| CVE-2026-23573 |
|
Cross-Site Scripting (XSS) in fortinet (CVE-2026-23573)
cross-site scripting in fortinet (CVE-2026-23573). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-43892 |
|
Vulnerability in fortinet (CVE-2025-43892)
vulnerability in fortinet (CVE-2025-43892). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-53379 |
|
Out-of-Bounds Read in fortinet (CVE-2025-53379)
vulnerability in fortinet (CVE-2025-53379). Confidential information can be exposed externally.
|
| CVE-2025-62675 |
|
Vulnerability in fortinet (CVE-2025-62675)
vulnerability in fortinet (CVE-2025-62675). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-62826 |
|
Vulnerability in fortinet (CVE-2025-62826)
vulnerability in fortinet (CVE-2025-62826). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-49938 |
|
Vulnerability in fortinet (CVE-2026-49938)
vulnerability in fortinet (CVE-2026-49938). Confidential information can be exposed externally.
|
| CVE-2026-25089 KEV |
|
[KEV] OS Command Injection in Fortinet fortisandbox (CVE-2026-25089)
OS command injection in Fortinet fortisandbox (CVE-2026-25089). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-67862 |
|
Vulnerability in fortinet (CVE-2025-67862)
vulnerability in fortinet (CVE-2025-67862). Successful exploitation can lead to full system takeover.
|
| CVE-2026-44279 |
|
Vulnerability in fortinet (CVE-2026-44279)
vulnerability in fortinet (CVE-2026-44279). Confidential information can be exposed externally.
|
| CVE-2026-44278 |
|
Vulnerability in fortinet (CVE-2026-44278)
vulnerability in fortinet (CVE-2026-44278). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-44277 |
|
Vulnerability in fortinet (CVE-2026-44277)
vulnerability in fortinet (CVE-2026-44277). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25088 |
|
SQL Injection in sqli (CVE-2026-25088)
SQL injection in sqli (CVE-2026-25088). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-25690 |
|
Vulnerability in fortinet (CVE-2026-25690)
vulnerability in fortinet (CVE-2026-25690). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-53681 |
|
SQL Injection in sqli (CVE-2025-53681)
SQL injection in sqli (CVE-2025-53681). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53680 |
|
OS Command Injection in fortinet (CVE-2025-53680)
OS command injection in fortinet (CVE-2025-53680). Successful exploitation can lead to full system takeover.
|
| CVE-2025-67604 |
|
Vulnerability in fortinet (CVE-2025-67604)
vulnerability in fortinet (CVE-2025-67604). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-53844 |
|
Out-of-Bounds Write in fortinet (CVE-2025-53844)
out-of-bounds write in fortinet (CVE-2025-53844). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53870 |
|
OS Command Injection in fortinet (CVE-2025-53870)
OS command injection in fortinet (CVE-2025-53870). Successful exploitation can lead to full system takeover.
|
| CVE-2026-26083 |
|
Vulnerability in fortinet (CVE-2026-26083)
vulnerability in fortinet (CVE-2026-26083). Successful exploitation can lead to full system takeover.
|
| CVE-2026-40688 |
|
Out-of-Bounds Write in fortinet (CVE-2026-40688)
out-of-bounds write in fortinet (CVE-2026-40688). Successful exploitation can lead to full system takeover.
|
| CVE-2026-39813 |
|
Vulnerability in path-traversal (CVE-2026-39813)
vulnerability in path-traversal (CVE-2026-39813). Successful exploitation can lead to full system takeover.
|
| CVE-2026-22155 |
|
Vulnerability in fortinet (CVE-2026-22155)
vulnerability in fortinet (CVE-2026-22155). Confidential information can be exposed externally.
|
| CVE-2026-21742 |
|
Vulnerability in fortinet (CVE-2026-21742)
vulnerability in fortinet (CVE-2026-21742). Confidential information can be exposed externally.
|
| CVE-2025-61848 |
|
SQL Injection in sqli (CVE-2025-61848)
SQL injection in sqli (CVE-2025-61848). Successful exploitation can lead to full system takeover.
|
| CVE-2025-61624 |
|
Path Traversal in path-traversal (CVE-2025-61624)
path traversal in path-traversal (CVE-2025-61624). Data can be tampered with by attackers.
|
| CVE-2025-53847 |
|
Vulnerability in fortinet (CVE-2025-53847)
vulnerability in fortinet (CVE-2025-53847). Data can be tampered with by attackers.
|
| CVE-2026-21643 KEV |
|
[KEV] SQL Injection in Fortinet forticlient-ems (CVE-2026-21643)
SQL injection in Fortinet forticlient-ems (CVE-2026-21643). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2026-35616 KEV |
|
[KEV] Vulnerability in Fortinet forticlient-ems (CVE-2026-35616)
vulnerability in Fortinet forticlient-ems (CVE-2026-35616). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2026-25836 |
|
OS Command Injection in fortinet (CVE-2026-25836)
OS command injection in fortinet (CVE-2026-25836). Successful exploitation can lead to full system takeover.
|
| CVE-2025-64157 |
|
Vulnerability in fortinet (CVE-2025-64157)
vulnerability in fortinet (CVE-2025-64157). Successful exploitation can lead to full system takeover.
|
| CVE-2025-55018 |
|
Vulnerability in fortinet (CVE-2025-55018)
vulnerability in fortinet (CVE-2025-55018). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24858 KEV |
|
[KEV] Vulnerability in Fortinet multiple-products (CVE-2026-24858)
vulnerability in Fortinet multiple-products (CVE-2026-24858). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-25249 |
|
Vulnerability in fortinet (CVE-2025-25249)
vulnerability in fortinet (CVE-2025-25249). Successful exploitation can lead to full system takeover.
|
| CVE-2025-59718 KEV |
|
[KEV] Vulnerability in Fortinet multiple-products (CVE-2025-59718)
vulnerability in Fortinet multiple-products (CVE-2025-59718). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
|
| CVE-2025-59719 |
|
Vulnerability in fortinet (CVE-2025-59719)
vulnerability in fortinet (CVE-2025-59719). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53679 |
|
OS Command Injection in fortinet (CVE-2025-53679)
OS command injection in fortinet (CVE-2025-53679). Successful exploitation can lead to full system takeover.
|
| CVE-2025-58413 |
|
Vulnerability in fortinet (CVE-2025-58413)
vulnerability in fortinet (CVE-2025-58413). Successful exploitation can lead to full system takeover.
|
| CVE-2025-53843 |
|
Vulnerability in fortinet (CVE-2025-53843)
vulnerability in fortinet (CVE-2025-53843). Successful exploitation can lead to full system takeover.
|
| CVE-2025-54821 |
|
Privilege Escalation in fortinet (CVE-2025-54821)
vulnerability in fortinet (CVE-2025-54821). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-58034 KEV |
|
[KEV] OS Command Injection in Fortinet fortiweb (CVE-2025-58034)
OS command injection in Fortinet fortiweb (CVE-2025-58034). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2025-64446 KEV |
|
[KEV] Vulnerability in Fortinet fortiweb (CVE-2025-64446)
vulnerability in Fortinet fortiweb (CVE-2025-64446). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|