Known Vulnerabilities for products from Fortinet
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Fortinet".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Fortinet can be found at device.report : Fortinet
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-40688 json | Not Provided | 2026-04-14 | 2026-04-16 | |
| CVE-2026-39815 json | Not Provided | 2026-04-14 | 2026-04-14 | |
| CVE-2026-39814 json | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39813 json | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 m... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-39812 json | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39811 json | Not Provided | 2026-04-14 | 2026-04-14 | |
| CVE-2026-39810 json | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to info... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39809 json | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientE... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39808 json | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiS... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-35616 json | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker ... | Not Provided | 2026-04-04 | 2026-04-06 |
| CVE-2026-27316 json | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versi... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-25691 json | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-22628 json | An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin ... | Not Provided | 2026-03-10 | 2026-04-09 |
| CVE-2026-22627 json | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 t... | Not Provided | 2026-03-10 | 2026-04-09 |
| CVE-2026-21741 json | An URL Redirection to Untrusted Site ('Open Redirect') vulnerability [CWE-601] vulnerability in Fortinet FortiNAC-F 7.6.0 thr... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-21643 json | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClient... | Not Provided | 2026-02-06 | 2026-04-14 |
| CVE-2025-68649 json | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2025-61886 json | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability ... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2025-61848 json | An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyz... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2025-61624 json | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS ... | Not Provided | 2026-04-14 | 2026-04-22 |
Known software with vulnerabilities from Fortinet
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Fortinet | Connect | 14.10 |
| Hardware | Fortinet | Fortiadc | - |
| Application | Fortinet | Fortiadc | 5.2.0 |
| Hardware | Fortinet | Fortiadc-1000e | - |
| Hardware | Fortinet | Fortiadc-1500d | - |
| Hardware | Fortinet | Fortiadc-2000d | - |
| Hardware | Fortinet | Fortiadc-200d | - |
| Hardware | Fortinet | Fortiadc-300e | - |
| Hardware | Fortinet | Fortiadc-4000d | - |
| Hardware | Fortinet | Fortiadc-400e | - |
| Hardware | Fortinet | Fortiadc-600e | - |
| Hardware | Fortinet | Fortiadc-700d | - |
| Operating System | Fortinet | Fortiadc Firmware | 3.2.0 |
| Application | Fortinet | Fortianalyzer | 4.0.0 |
| Hardware | Fortinet | Fortianalyzer-1000d | - |
| Hardware | Fortinet | Fortianalyzer-2000b | - |
| Hardware | Fortinet | Fortianalyzer-200d | - |
| Hardware | Fortinet | Fortianalyzer-3000d | - |
| Hardware | Fortinet | Fortianalyzer-300d | - |
| Hardware | Fortinet | Fortianalyzer-4000b | - |