Fortinet FortiClientLinux 安全漏洞

Fortinet FortiClientLinux is a security client software developed by the American company Fortinet. There are security vulnerabilities in versions 7.4.0 to 7.4.4 of Fortinet FortiClientLinux, as well as in versions 7.2.2 to 7.2.12 of FortiClientLinux. These vulnerabilities stem from UNIX symbolic...

The vulnerability of Fortinet FortiClientWindows security tools arises from incorrect handling of symbolic links before accessing a file. This allows attackers to escalate their privileges.

The vulnerability of Fortinet FortiClientWindows protection lies in the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow attackers to enhance their privileges...

Exploit for OS Command Injection in Fortinet Fortiweb

No d...

Open-Source CyberStrikeAI Deployed in AI-Driven FortiGate Attacks Across 55 Countries

The threat actor behind the recently disclosed artificial intelligence AI-assisted campaign targeting Fortinet FortiGate appliances leveraged an open-source, AI-native security testing platform called CyberStrikeAI to execute the attacks. The new findings come from Team Cymru, which detected its...

Exploit for OS Command Injection in Fortinet Fortiweb

No d...

Exploit for SQL Injection in Fortinet Fortiweb

CVE-2025-25257 Detection Engineering Repository !CVEhttps:...

Exploit for Numeric Truncation Error in Fortinet Fortios

CVE-2022-42475 Background This is the exploit for the blog...

FortiGate Exposure Audit Tool / Double Slash Path Validation Scanner

The FortiGate Exposure Audit Tool is a defensive security auditing script designed to identify potential path validation inconsistencies in devices that appear to be running FortiGate by Fortinet. This tool does not attempt exploitation, file extraction, or configuration access...

Mass FortiGate Symlink Bypass Scanner

FortiGate mass symlink bypass scanner that adds structured validation, impact assessment, and reporting logic. It first verifies whether the target actually appears to be a FortiGate device from Fortinet using fingerprinting heuristics, which reduces false positives. Instead of testing a single...

Fortinet FortiClient VPN FCConfig Utility Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Fortinet FortiClient VPN. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of SSL-VPN network gateways in Fortinet FortiOS operating systems is related to information disclosure. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms by sending specially crafted HTTP requests...

The vulnerability of the command-line interface of Fortinet FortiOS operating systems allows a hacker to execute arbitrary code.

The vulnerability of the command-line interface in Fortinet FortiOS operating systems is related to insufficient handling of format strings. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems allows attackers to bypass existing security mechanisms.

The vulnerability of the SSL-VPN network interface function in Fortinet FortiOS operating systems involves bypassing authentication due to a fundamental error. Exploiting this vulnerability allows an attacker to circumvent existing security mechanisms remotely...

The vulnerability of the graphical user interface of Fortinet FortiOS operating systems allows a hacker to redirect users to any desired URL address.

The vulnerability of the graphical user interface of Fortinet FortiOS operating systems is related to deficiencies in HTTP request processing. Exploiting this vulnerability allows a malicious actor to redirect users to any desired URL address...

The vulnerability of Fortinet FortiOS operating systems arises from insufficient verification of the source of the communication channel, allowing attackers to gain unauthorized access to protected information.

The vulnerability of Fortinet FortiOS operating systems is related to insufficient verification of the source of the communication channel. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information by sending specially crafted requests...

Exploit for Authentication Bypass by Primary Weakness in Fortinet Fortios

Authentication Bypass Vulnerability in Fortinet FortiOSCVE-20...

CVE-2025-62439

An Improper Verification of Source of a Communication Channel vulnerability CWE-940 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated user with knowledge of FSSO policy configurations t...

CVE-2025-55018

An inconsistent interpretation of http requests 'http request smuggling' vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenticated attacker to smuggle an unlogged http request...

Vulnerabilities fixed in Fortinet FortiSandbox, FortiAuthenticator and FortiClient

Fortinet has fixed vulnerabilities in FortiSandbox versions 4.4.8 and 5.0.5, FortiAuthenticator versions 6.3 to 6.6.6 and FortiClient versions 7.0, 7.2 and 7.4. The vulnerability in FortiSandbox involves Cross-site Scripting, which allows unauthenticated attackers to execute arbitrary commands vi...

CVE-2026-22153

An Authentication Bypass by Primary Weakness vulnerability CWE-305 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4 may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, when the remote LDAP server is configured in a specific way...