Known Vulnerabilities for Fortios by Fortinet
Listed below are 10 of the newest known vulnerabilities associated with "Fortios" by "Fortinet".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2025-61624 json | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS ... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2025-53847 json | A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2024-26009 json | An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15,... | Not Provided | 2025-08-12 | 2026-04-20 |
| CVE-2024-23112 json | 4.3 - MEDIUM | 2024-03-12 | 2024-03-15 | |
| CVE-2023-42790 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 8.1 - HIGH | 2024-03-12 | 2024-03-15 |
| CVE-2023-42789 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2024-03-12 | 2024-03-15 |
| CVE-2023-41841 json | An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to ... | 8.8 - HIGH | 2023-10-10 | 2023-11-07 |
| CVE-2023-41675 json | A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiPro... | 5.3 - MEDIUM | 2023-10-10 | 2023-11-07 |
| CVE-2023-40718 json | A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via cr... | 7.5 - HIGH | 2023-10-10 | 2023-11-07 |
| CVE-2023-37935 json | A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and ... | 7.5 - HIGH | 2023-10-10 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Fortinet | Fortios | 6.4.1 | |||
| Operating System | Fortinet | Fortios | 6.4.0 | |||
| Operating System | Fortinet | Fortios | 6.2.4 | |||
| Operating System | Fortinet | Fortios | 6.2.3 | |||
| Operating System | Fortinet | Fortios | 6.2.2 | |||
| Operating System | Fortinet | Fortios | 6.2.1 | |||
| Operating System | Fortinet | Fortios | 6.2.0 | |||
| Operating System | Fortinet | Fortios | 6.0.9 | |||
| Operating System | Fortinet | Fortios | 6.0.8 | |||
| Operating System | Fortinet | Fortios | 6.0.7 | |||
| Operating System | Fortinet | Fortios | 6.0.6 | |||
| Operating System | Fortinet | Fortios | 6.0.5 | |||
| Operating System | Fortinet | Fortios | 6.0.4 | |||
| Operating System | Fortinet | Fortios | 6.0.3 | |||
| Operating System | Fortinet | Fortios | 6.0.2 | |||
| Operating System | Fortinet | Fortios | 6.0.10 | |||
| Operating System | Fortinet | Fortios | 6.0.1 | |||
| Operating System | Fortinet | Fortios | 6.0.0 | |||
| Operating System | Fortinet | Fortios | 5.6.9 | |||
| Operating System | Fortinet | Fortios | 5.6.8 |