3690 matches found
PT-2026-71066
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via...
UI DoS attack
...
Stack buffer overflow in WAD
...
CVE-2026-71408: Allocation of Resources Without Limits or Throttling
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via...
CVE-2026-71407: Stack-based Buffer Overflow
A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit...
Fortinet Fortigate Stack buffer overflow in WAD (FG-IR-26-161)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-161 advisory. - A Stack-based Buffer Overflow vulnerability CWE-121 vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an...
PT-2026-71065
Name of the Vulnerable Software and Affected Versions Fortinet FortiOS versions 7.6.1 through 7.6.6 Description A stack-based buffer overflow occurs in the WAD daemon when the explicit proxy is configured with Kerberos authentication and SOCKS enabled. An unauthenticated attacker can exploit this...
PT-2026-71058
Name of the Vulnerable Software and Affected Versions FortiClientWindows versions 7.4.0 through 7.4.3 FortiClientWindows versions 7.2.0 through 7.2.11 Description A classic buffer overflow occurs due to a buffer copy operation that does not verify the size of the input. This allows an...
Siemens RUGGEDCOM APE1808
SUMMARY Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products. Siemens recommends to contact customer support for additional information, and follow Fortinet advisory for workarounds and mitigation measures. 2. GENERAL...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-68686link is external Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2026-16812link is external Arista...
VulnCheck KEV: CVE-2025-68686
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An...
Exploit for Authentication Bypass Using an Alternate Path or Channel in Fortinet Fortiproxy
CVE-2025-24472 — Fortinet FortiOS / FortiProxy Authentication...
VulnCheck KEV: CVE-2025-62631
An insufficient session expiration vulnerability CWE-613 vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to maintain access to network resources via an active SSLVPN session not terminated after a user's passwor...
The vulnerability affects the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software management platform FortiSwitch Manager, and the FortiProxy proxy server for Internet attack protection. This allows a perpetrator to execute arbitrary code.
The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...
The vulnerability of the Command Line Interface (CLI) of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local platform for managing software products allows a perpetrator to execute arbitrary code.
The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server, related to the failure to handle CRLF sequences in HTTP headers, allows attackers to gain unauthorized access and modify authentication requests.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access and modify...
The vulnerability of the command-line interface (CLI) of FortiOS operating systems and FortiProxy proxy servers, which allows attackers to compromise the confidentiality of protected information.
The vulnerability of the command-line interface CLI of FortiOS operating systems and FortiProxy proxy servers for protecting against internet attacks is related to operations that go beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the...
The vulnerability of the graphical user interface (GUI) of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks allows a perpetrator to execute arbitrary code.
The vulnerability of the graphical user interface GUI of the FortiPAM identity management system, the FortiOS operating system, and the FortiProxy proxy server for protecting against internet attacks is related to the execution of operations outside of the buffer in memory. Exploiting this...
Vulnerability of FortiOS operating systems and FortiProxy proxy servers in protecting against Internet attacks, due to failure to handle CRLF sequences in HTTP headers, allowing attackers to execute arbitrary code.
The vulnerability of the FortiOS operating systems and the FortiProxy proxy server for protecting against Internet attacks is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...