Known Vulnerabilities for products from Fortinet
Listed below are 20 of the newest known vulnerabilities associated with the vendor "Fortinet".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Additional devices specifications by Fortinet can be found at device.report : Fortinet
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-44279 json | Not Provided | 2026-05-12 | 2026-05-12 | |
| CVE-2026-44278 json | Not Provided | 2026-05-12 | 2026-05-12 | |
| CVE-2026-44277 json | Not Provided | 2026-05-12 | 2026-05-12 | |
| CVE-2026-40688 json | An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-39815 json | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiDDoS-F ... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-39814 json | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39813 json | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 m... | Not Provided | 2026-04-14 | 2026-04-20 |
| CVE-2026-39812 json | Not Provided | 2026-04-14 | 2026-04-14 | |
| CVE-2026-39811 json | Not Provided | 2026-04-14 | 2026-04-14 | |
| CVE-2026-39810 json | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientEMS 7.4.0 through 7.4.5 may allow attacker to info... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39809 json | A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientE... | Not Provided | 2026-04-14 | 2026-04-21 |
| CVE-2026-39808 json | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiS... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-35616 json | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker ... | Not Provided | 2026-04-04 | 2026-04-06 |
| CVE-2026-27316 json | A insufficiently protected credentials vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4 all versi... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-25836 json | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet Forti... | Not Provided | 2026-03-10 | 2026-05-12 |
| CVE-2026-25691 json | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0... | Not Provided | 2026-04-14 | 2026-04-22 |
| CVE-2026-24858 json | An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7... | Not Provided | 2026-01-27 | 2026-05-12 |
| CVE-2026-23708 json | A improper authentication vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5.0 through 7.5.2, F... | Not Provided | 2026-04-14 | 2026-05-06 |
| CVE-2026-22828 json | A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer Cloud 7.6.2 through 7.6.4, FortiManager Cloud 7.6.2 thro... | Not Provided | 2026-04-14 | 2026-05-01 |
| CVE-2026-22628 json | An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin ... | Not Provided | 2026-03-10 | 2026-04-09 |
Known software with vulnerabilities from Fortinet
| Type | Vendor | Product | Version |
|---|---|---|---|
| Application | Fortinet | Connect | 14.10 |
| Hardware | Fortinet | Fortiadc | - |
| Application | Fortinet | Fortiadc | 5.2.0 |
| Hardware | Fortinet | Fortiadc-1000e | - |
| Hardware | Fortinet | Fortiadc-1500d | - |
| Hardware | Fortinet | Fortiadc-2000d | - |
| Hardware | Fortinet | Fortiadc-200d | - |
| Hardware | Fortinet | Fortiadc-300e | - |
| Hardware | Fortinet | Fortiadc-4000d | - |
| Hardware | Fortinet | Fortiadc-400e | - |
| Hardware | Fortinet | Fortiadc-600e | - |
| Hardware | Fortinet | Fortiadc-700d | - |
| Operating System | Fortinet | Fortiadc Firmware | 3.2.0 |
| Application | Fortinet | Fortianalyzer | 4.0.0 |
| Hardware | Fortinet | Fortianalyzer-1000d | - |
| Hardware | Fortinet | Fortianalyzer-2000b | - |
| Hardware | Fortinet | Fortianalyzer-200d | - |
| Hardware | Fortinet | Fortianalyzer-3000d | - |
| Hardware | Fortinet | Fortianalyzer-300d | - |
| Hardware | Fortinet | Fortianalyzer-4000b | - |