Lucene search
+L

3222 matches found

NVD
NVD
added 2026/01/27 8:16 p.m.13 views

CVE-2026-24858

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS0.86088EPSS
SaveExploits0References4
CVE
CVE
added 2026/01/27 7:18 p.m.837 views

CVE-2026-24858

CVE-2026-24858 is a high-severity authentication bypass affecting Fortinet FortiAnalyzer, FortiManager, FortiOS, FortiProxy, and FortiWeb (various 7.x versions) via FortiCloud SSO. The issue allows an attacker with a FortiCloud account and a registered device to log into other devices registered ...

9.8CVSS7AI score0.86088EPSS
SaveIn wildExploits0References4Affected Software6
Cvelist
Cvelist
added 2026/01/27 7:18 p.m.421 views

CVE-2026-24858

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS0.86088EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/01/27 7:18 p.m.7 views

CVE-2026-24858

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS7AI score0.86088EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/27 7:18 p.m.11 views

CVE-2026-24858

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS6.1AI score0.86088EPSS
SaveIn wildExploits0References2Affected Software5
EUVD
EUVD
added 2026/01/27 7:18 p.m.19 views

EUVD-2026-4712

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS5.9AI score0.86088EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
added 2026/01/27 12:00 a.m.6 views

VulnCheck KEV: CVE-2026-24858

An Authentication Bypass Using an Alternate Path or Channel vulnerability CWE-288 vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiManager 7.6.0 through 7.6.5, FortiManager...

9.8CVSS5.8AI score0.86088EPSS
SaveIn wildExploits0References6
CNNVD
CNNVD
added 2026/01/27 12:00 a.m.19 views

Fortinet’s various products have security vulnerabilities

Fortinet FortiOS are products of the American company Fortinet. Fortinet FortiOS is a security operating system specifically designed for the FortiGate network security platform. Fortinet FortiManager is a centralized network security management platform. Fortinet FortiAnalyzer is a centralized...

9.8CVSS7AI score0.86088EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/01/27 12:00 a.m.12 views

PT-2026-5008

Name of the Vulnerable Software and Affected Versions FortiAnalyzer versions 7.0.0 through 7.0.15 FortiAnalyzer versions 7.2.0 through 7.2.11 FortiAnalyzer versions 7.4.0 through 7.4.9 FortiAnalyzer versions 7.6.0 through 7.6.5 FortiManager versions 7.0.0 through 7.0.15 FortiManager versions 7.2....

9.8CVSS7.6AI score0.86088EPSS
SaveExploits0References246
CISA KEV Catalog
CISA KEV Catalog
added 2026/01/27 12:00 a.m.27 views

Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication...

9.8CVSS5.9AI score0.86088EPSS
SaveIn wildExploits0
RedhatCVE
RedhatCVE
added 2026/01/14 5:22 p.m.11 views

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to...

9.8CVSS6AI score0.02403EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2026/01/14 12:00 a.m.22 views

The vulnerability of cw_acd on the local management platform FortiSwitchManager and the FortiOS operating systems allows a perpetrator to execute arbitrary commands.

The vulnerability of cwacd on the local management platform FortiSwitchManager and the FortiOS operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands by sending specially crafte...

8.1CVSS6.3AI score0.02403EPSS
SaveExploits2References5Affected Software3
NVD
NVD
added 2026/01/13 5:15 p.m.23 views

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to...

9.8CVSS0.02403EPSS
SaveExploits2References4
OSV
OSV
added 2026/01/13 5:15 p.m.11 views

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to...

9.8CVSS6.2AI score0.02403EPSS
SaveExploits2References1
Vulnrichment
Vulnrichment
added 2026/01/13 4:32 p.m.8 views

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to...

8.1CVSS6AI score0.02403EPSS
SaveExploits2References1
CVE
CVE
added 2026/01/13 4:32 p.m.445 views

CVE-2025-25249

CVE-2025-25249 is a heap-based buffer overflow (CWE-122) in the cw_acd daemon of Fortinet FortiOS (6.4, 7.0, 7.2, 7.4, 7.6), FortiSASE (25.1.a.2, 25.2.b), and FortiSwitchManager (7.0, 7.2). A remote, unauthenticated attacker can execute arbitrary code via specially crafted packets. Fortinet notes...

9.8CVSS6AI score0.02403EPSS
SaveIn wildExploits2References4Affected Software1
EUVD
EUVD
added 2026/01/13 4:32 p.m.17 views

EUVD-2026-2223

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManag...

8.1CVSS7.4AI score0.02403EPSS
SaveExploits2References2
Cvelist
Cvelist
added 2026/01/13 4:32 p.m.48 views

CVE-2025-25249

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to...

8.1CVSS0.02403EPSS
SaveExploits2References1
CNNVD
CNNVD
added 2026/01/13 12:00 a.m.18 views

Fortinet多款产品 缓冲区错误漏洞

Fortinet FortiOS and others are products of Fortinet, Inc.Fortinet FortiOS is a dedicated security operating system on the FortiGate network security platform.Fortinet FortiSwitchManager is a network switch management tool designed to help organizations manage Fortinet FortiSwitchManager is a...

9.8CVSS6.2AI score0.02403EPSS
SaveExploits2References2
Fortinet
Fortinet
added 2026/01/13 12:00 a.m.17 views

Heap-based buffer overflow in cw_acd daemon

...

9.8CVSS0.02403EPSS
SaveExploits2
Rows per page
Query Builder