Patchfirst
Patchfirst

Vendor

Fortinet

32 of 55 Fortinet CVEs in Patchfirst (58%) are in of vulnerabilities exploited in the wild, 14 of them used by ransomware.

CVEs
55
In CISA KEV
3258%
Known ransomware use
14
Median days to KEV
35
from publication
Latest KEV listing
16 Oct 2026
Watch Fortinet Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs
  • FortiOS In KEV: 9 CVEs: 13
  • Multiple Products In KEV: 7 CVEs: 7
  • FortiOS and FortiProxy In KEV: 4 CVEs: 4
  • FortiWeb In KEV: 3 CVEs: 5
  • FortiClient EMS In KEV: 3 CVEs: 3
  • FortiSandbox In KEV: 2 CVEs: 4
  • FortiMail In KEV: 1 CVEs: 2
  • FortiManager In KEV: 1 CVEs: 1
  • FortiOS and FortiADC In KEV: 1 CVEs: 1
  • FortiOS and FortiProxy SSL-VPN In KEV: 1 CVEs: 1

Top ATT&CK techniques

What attackers do with Fortinet CVEs
Open in ATT&CK Navigator

Counts are Fortinet CVEs linked to the technique. Each link’s provenance is on the CVE page.

Fortinet CVEs

55 CVEs, by priority
  1. CVE-2018-13379Fortinet FortiOS SSL VPN Path Traversal Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application5 reports
    >99.9%Top 0.01%
    89.9priority
  2. CVE-2022-42475Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow+2 more · 4 reports
    99.5%Top 0.06%
    88.8priority
  3. CVE-2026-35616Fortinet FortiClient EMS Improper Access Control Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    94.0%Top 0.15%
    84.8priority
  4. CVE-2026-21643Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    97.7%Top 0.1%
    84.8priority
  5. CVE-2025-59718Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    68.3%Top 0.67%
    84.7priority
  6. CVE-2024-55591Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitCritical · 9.8T1078Valid AccountsT1068Exploitation for Privilege Escalation+2 more · 1 report
    94.3%Top 0.15%
    83.7priority
  7. CVE-2023-48788Fortinet FortiClient EMS SQL Injection Vulnerability
    Fortinet · FortiClient EMSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report
    98.4%Top 0.08%
    83.7priority
  8. CVE-2023-27997Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
    Fortinet · FortiOS and FortiProxy SSL-VPNKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow+1 more · 1 report
    85.7%Top 0.28%
    83.7priority
  9. CVE-2022-40684Fortinet Multiple Products Authentication Bypass Vulnerability
    Fortinet · Multiple ProductsKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1098.004SSH Authorized Keys
    >99.9%Top 0.02%
    79.9priority
  10. CVE-2025-64446Fortinet FortiWeb Path Traversal Vulnerability
    Fortinet · FortiWebKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    91.1%Top 0.19%
    79.8priority
  11. CVE-2024-21762Fortinet FortiOS Out-of-Bound Write Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1574Hijack Execution Flow
    84.6%Top 0.3%
    79.8priority
  12. CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1608.001Upload MalwareT1133External Remote Services+5 more
    30.9%Top 1.7%
    79.5priority
  13. CVE-2026-39808Fortinet FortiSandbox OS Command Injection Vulnerability
    Fortinet · FortiSandboxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    93.2%Top 0.17%
    78.7priority
  14. CVE-2024-23108An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
    Fortinet · FortiSIEMPublic exploitCritical · 9.7
    80.3%Top 0.38%
    78.6priority
  15. CVE-2020-12812Fortinet FortiOS SSL VPN Improper Authentication Vulnerability
    Fortinet · FortiOSKEVRansomwareCritical · 9.8T1556Modify Authentication Process1 report
    45.4%Top 1.2%
    78.5priority
  16. CVE-2026-104286Fortinet FortiMail Path Traversal Vulnerability
    Fortinet · FortiMailKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1565.001Stored Data Manipulation
    4.6%Top 8.4%
    78.2priority
  17. CVE-2018-13382Fortinet FortiOS and FortiProxy Improper Authorization
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1098Account Manipulation
    81.7%Top 0.36%
    78.2priority
  18. CVE-2025-25249Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    3.7%Top 10%
    77.8priority
  19. CVE-2025-24472Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
    Fortinet · FortiOS and FortiProxyKEVRansomwarePublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1098.004SSH Authorized Keys
    7.2%Top 5.7%
    77.5priority
  20. CVE-2019-5591Fortinet FortiOS Default Configuration Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitMedium · 6.5T1133External Remote ServicesT1557Adversary-in-the-Middle+1 more
    18.6%Top 2.7%
    77.0priority
  21. CVE-2019-6693Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
    Fortinet · FortiOSKEVRansomwarePublic exploitMedium · 6.5T1552Unsecured CredentialsT1555Credentials from Password Stores
    6.6%Top 6.1%
    76.3priority
  22. CVE-2018-13374Fortinet FortiOS and FortiADC Improper Access Control Vulnerability
    Fortinet · FortiOS and FortiADCKEVRansomwarePublic exploitMedium · 4.3
    38.1%Top 1.4%
    75.7priority
  23. CVE-2026-25089Fortinet FortiSandbox OS Command Injection Vulnerability
    Fortinet · FortiSandboxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    76.1%Top 0.47%
    74.8priority
  24. CVE-2026-24858Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1078Valid Accounts
    86.6%Top 0.26%
    74.8priority
  25. CVE-2024-23113Fortinet Multiple Products Format String Vulnerability
    Fortinet · Multiple ProductsKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    61.7%Top 0.83%
    73.6priority
  26. CVE-2026-39813A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…
    Fortinet · FortiSandboxPublic exploitCritical · 9.1
    22.2%Top 2.3%
    73.3priority
  27. CVE-2022-39952A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7…
    Fortinet · FortiNACPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter1 report
    99.8%Top 0.04%
    73.3priority
  28. CVE-2025-64155An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
    Fortinet · FortiSIEMPublic exploitCritical · 9.4
    43.6%Top 1.3%
    72.9priority
  29. CVE-2025-58034Fortinet FortiWeb OS Command Injection Vulnerability
    Fortinet · FortiWebKEVPublic exploitHigh · 7.2T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    54.7%Top 0.98%
    72.8priority
  30. CVE-2018-13383Fortinet FortiOS and FortiProxy Out-of-bounds Write
    Fortinet · FortiOS and FortiProxyKEVRansomwareMedium · 6.5T1499.004Application or System Exploitation
    32.5%Top 1.7%
    72.2priority
  31. CVE-2026-106173A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…
    Fortinet · FortiSIEMPublic exploitCritical · 9.8
    1.0%Top 37%
    71.6priority
  32. CVE-2024-23109An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…
    Fortinet · FortiSIEMCritical · 9.7
    3.3%Top 12%
    71.4priority
  33. CVE-2025-25257Fortinet FortiWeb SQL Injection Vulnerability
    Fortinet · FortiWebKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059.004Unix Shell+3 more
    99.9%Top 0.03%
    69.9priority
  34. CVE-2024-47575Fortinet FortiManager Missing Authentication Vulnerability
    Fortinet · FortiManagerKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter
    94.8%Top 0.14%
    69.8priority
  35. CVE-2025-25256An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…
    Fortinet · FortiSIEMPublic exploitCritical · 9.8
    65.3%Top 0.75%
    69.1priority
  36. CVE-2025-59719An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…
    Fortinet · FortiWebCritical · 9.1
    29.2%Top 1.8%
    69.0priority
  37. CVE-2023-34993A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…
    Fortinet · FortiWLMPublic exploitCritical · 9.6
    21.3%Top 2.4%
    66.9priority
  38. CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability
    Fortinet · Multiple ProductsKEVMedium · 6.5
    1.3%Top 29%
    66.8priority
  39. CVE-2025-68686Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
    Fortinet · FortiOSKEVMedium · 5.9T1190Exploit Public-Facing ApplicationT1005Data from Local System
    29.5%Top 1.8%
    66.8priority
  40. CVE-2022-41328Fortinet FortiOS Path Traversal Vulnerability
    Fortinet · FortiOSKEVHigh · 7.1T1574Hijack Execution FlowT1037Boot or Logon Initialization Scripts+2 more · 1 report
    10.7%Top 4.2%
    66.0priority
  41. CVE-2025-52970A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions…
    Fortinet · FortiWebPublic exploitHigh · 7.7
    10.1%Top 4.4%
    65.6priority
  42. CVE-2021-44168Fortinet FortiOS Arbitrary File Download
    Fortinet · FortiOSKEVPublic exploitHigh · 7.8T1078.003Local AccountsT1601Modify System Image
    0.9%Top 40%
    60.4priority
  43. CVE-2024-21754A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3…
    Fortinet · FortiProxyPublic exploitLow · 1.7
    3.5%Top 11%
    60.1priority
  44. CVE-2021-22122An improper neutralization of input during web page generation in FortiWeb GUI interface 6.3.0 through 6.3.7 and…
    Fortinet · Fortinet FortiWebPublic exploit
    10.5%Top 4.2%
    59.2priority
  45. CVE-2025-25252An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through…
    Fortinet · FortiOSMedium · 4.3
    0.3%Top 73%
    53.4priority
  46. CVE-2022-41335A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…
    Fortinet · FortiSwitchManagerHigh · 8.6
    0.9%Top 40%
    53.1priority
  47. CVE-2025-62631An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all…
    Fortinet · FortiOSMedium · 5.3
    0.3%Top 77%
    48.3priority
  48. CVE-2026-25815Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as…
    Fortinet · FortiOSLow · 3.2
    0.1%Top 99%
    42.5priority
  49. CVE-2025-24477A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7…
    Fortinet · FortiOSMedium · 4.0
    0.2%Top 85%
    41.5priority
  50. CVE-2024-50570A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0…
    Fortinet · FortiClientMacMedium · 4.9
    0.1%Top 97%
    39.1priority
  51. CVE-2023-34992A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…
    Fortinet · FortiSIEMPublic exploitCritical · 9.7
    81.7%Top 0.36%
    32.4priority
  52. CVE-2021-22123An OS command injection vulnerability in FortiWeb's management interface 6.3.7 and below, 6.2.3 and below, 6.1.x…
    Fortinet · Fortinet FortiWebPublic exploitHigh · 7.6
    84.4%Top 0.3%
    30.9priority
  53. CVE-2018-13380A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2…
    Fortinet · Fortinet FortiOS and FortiProxyPublic exploitMedium · 4.7
    62.5%Top 0.81%
    29.2priority
  54. CVE-2020-9294An improper authentication vulnerability in FortiMail 5.4.10, 6.0.7, 6.2.2 and earlier and FortiVoiceEntreprise 6.0.0…
    Fortinet · FortiMailPublic exploit
    81.5%Top 0.36%
    24.9priority
  55. CVE-2026-107656An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…
    Fortinet · FortiSandboxCritical · 9.8
    0.9%Top 42%
    19.9priority
↑ ↓ chooseEnter openEsc close