Exploit for SQL Injection in Fortinet Fortiweb

CVE-2025-25257 Detection Engineering Repository !CVEhttps:...

Exploit for Numeric Truncation Error in Fortinet Fortios

CVE-2022-42475 Background This is the exploit for the blog...

FortiGate Exposure Audit Tool / Double Slash Path Validation Scanner

The FortiGate Exposure Audit Tool is a defensive security auditing script designed to identify potential path validation inconsistencies in devices that appear to be running FortiGate by Fortinet. This tool does not attempt exploitation, file extraction, or configuration access...

Mass FortiGate Symlink Bypass Scanner

FortiGate mass symlink bypass scanner that adds structured validation, impact assessment, and reporting logic. It first verifies whether the target actually appears to be a FortiGate device from Fortinet using fingerprinting heuristics, which reduces false positives. Instead of testing a single...

Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of SSL-VPN network gateways in Fortinet FortiOS operating systems is related to information disclosure. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending specially crafted HTTP requests...

The vulnerability of the command-line interface of Fortinet FortiOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface in Fortinet FortiOS operating systems is related to insufficient handling of format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems involves bypassing authentication due to a fundamental error. Exploiting this vulnerability allows an attacker to circumvent existing security mechanisms remotely...

The vulnerability of Fortinet FortiOS operating systems arises from insufficient verification of the source of the communication channel, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Fortinet FortiOS operating systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by sending specially crafted requests...

The vulnerability of the graphical user interface of Fortinet FortiOS operating systems allows a hacker to redirect users to any desired URL address.

The vulnerability of the graphical user interface of Fortinet FortiOS operating systems is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...

Exploit for Authentication Bypass by Primary Weakness in Fortinet Fortios

Authentication Bypass Vulnerability in Fortinet FortiOSCVE-20...

CVE-2025-62439

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations t...

CVE-2025-55018

An inconsistent interpretation of http requests 'http request smuggling' vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request...

Vulnerabilities fixed in Fortinet FortiSandbox, FortiAuthenticator and FortiClient

Fortinet has fixed vulnerabilities in FortiSandbox versions 4.4.8 and 5.0.5, FortiAuthenticator versions 6.3 to 6.6.6 and FortiClient versions 7.0, 7.2 and 7.4. The vulnerability in FortiSandbox involves Cross-site Scripting, which allows unauthenticated attackers to execute arbitrary commands vi...

CVE-2026-22153

An Authentication Bypass by Primary Weakness vulnerability CWE-305 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way...

CVE-2026-21743

A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all versions, FortiAuthenticator 6.3 all versions may allow a read-only user to make modification to local users via a file upload to an unprotecte...

CVE-2025-62676

An Improper Link Resolution Before File Access 'Link Following' vulnerability CWE-59 vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file...

CVE-2025-68686

CVE-2025-68686 affects Fortinet FortiOS across multiple branches (7.6.0–7.6.1, 7.4.0–7.4.6, 7.2.x, 7.0.x, 6.4.x). It permits a remote unauthenticated attacker to bypass the patch for the symbolic link persistency mechanism via crafted HTTP requests, resulting in exposure of sensitive information....

CVE-2025-62439

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations t...

CVE-2025-62676

An Improper Link Resolution Before File Access 'Link Following' vulnerability CWE-59 vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.4, FortiClientWindows 7.2.0 through 7.2.12, FortiClientWindows 7.0 all versions may allow a local low-privilege attacker to perform an arbitrary file...