Known Vulnerabilities for products from Fortinet
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Fortinet".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Fortinet can be found at device.report : Fortinet
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-49938 json | Not Provided | 2026-06-09 | 2026-06-09 | |
| CVE-2026-44279 json | Not Provided | 2026-05-12 | 2026-05-12 | |
| CVE-2026-44278 json | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.... | Not Provided | 2026-05-12 | 2026-05-16 |
| CVE-2026-44277 json | A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.... | Not Provided | 2026-05-12 | 2026-05-28 |
| CVE-2026-40688 json | An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-39815 json | Not Provided | 2026-04-14 | 2026-04-14 | |
| CVE-2026-39814 json | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39813 json | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 m... | Not Provided | 2026-04-14 | 2026-06-18 |
| CVE-2026-39812 json | A improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Fortinet FortiSandbox... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39811 json | A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, FortiW... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39810 json | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to info... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39809 json | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientE... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39808 json | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiS... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-35616 json | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker ... | Not Provided | 2026-04-04 | 2026-04-06 |
| CVE-2026-27316 json | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versi... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-26083 json | A missing authorization vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.1, FortiSandbox 4.4.0 through 4.4.8, FortiSa... | Not Provided | 2026-05-12 | 2026-05-15 |
| CVE-2026-25836 json | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet Forti... | Not Provided | 2026-03-10 | 2026-05-12 |
| CVE-2026-25691 json | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-25690 json | An improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiDeceptor... | Not Provided | 2026-05-12 | 2026-05-18 |
| CVE-2026-25089 json | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiS... | Not Provided | 2026-06-09 | 2026-06-11 |
Known software with vulnerabilities from Fortinet
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Fortinet | Connect | 14.10 |
| Hardware | Fortinet | Fortiadc | - |
| Application | Fortinet | Fortiadc | 5.2.0 |
| Hardware | Fortinet | Fortiadc-1000e | - |
| Hardware | Fortinet | Fortiadc-1500d | - |
| Hardware | Fortinet | Fortiadc-2000d | - |
| Hardware | Fortinet | Fortiadc-200d | - |
| Hardware | Fortinet | Fortiadc-300e | - |
| Hardware | Fortinet | Fortiadc-4000d | - |
| Hardware | Fortinet | Fortiadc-400e | - |
| Hardware | Fortinet | Fortiadc-600e | - |
| Hardware | Fortinet | Fortiadc-700d | - |
| Operating System | Fortinet | Fortiadc Firmware | 3.2.0 |
| Application | Fortinet | Fortianalyzer | 4.0.0 |
| Hardware | Fortinet | Fortianalyzer-1000d | - |
| Hardware | Fortinet | Fortianalyzer-2000b | - |
| Hardware | Fortinet | Fortianalyzer-200d | - |
| Hardware | Fortinet | Fortianalyzer-3000d | - |
| Hardware | Fortinet | Fortianalyzer-300d | - |
| Hardware | Fortinet | Fortianalyzer-4000b | - |