174 matches found
CVE-2024-48887-Exploit
CVE-2024-48887-Unverified Password Change CWE-620 Overview An unverified password change vulnerability in Fortinet FortiSwitch GUI that allows a remote unauthenticated attacker to change admin passwords via a specially crafted request Exploit: Download here Details CVE ID : CVE-2024-48887 Publish...
CVE-2024-48887-FortiSwitch-Exploit
CVE-2024-48887-FortiSwitch-Exploit 🚨 FortiSwitch CVE-2024-48887 PoC JavaScript 🚨 🔥 Just dropped a lightweight JavaScript snippet showcasing how unauthorized password changes can be triggered on vulnerable Fortinet FortiSwitch GUI endpoints. 🛠️ About the Vulnerability: An attacker can craft a simpl...
CVE-2026-106175
A Double Free vulnerability CWE-415 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions, FortiSwitch 7.6.0 through 7.6.6, FortiSwitch 7.4 all versions,...
CVE-2026-106175
A Double Free vulnerability [CWE-415] exists in several Fortinet products, including FortiOS (7.6.0 through 7.6.7, 7.4, 7.2), FortiProxy (7.6.0 through 7.6.6, 7.4, 7.2), and FortiSwitch (7.6.0 through 7.6.6, 7.4, 7.2). This flaw allows a local authenticated attacker to crash the newcli daemon by ...
CLEANSTART-2026-LB59576 Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3
Security vulnerability affects the apache2 package. An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3...
FortiPAM identity management Command Line Interface Code Execution
The vulnerability of the Command Line Interface CLI of the FortiPAM identity management system, the FortiOS operating system, the FortiProxy proxy server for protecting against internet attacks, and the FortiSwitch Manager local software platform is related to an incorrect restriction on the path...
FortiPAM SSL-VPN Code Execution
The vulnerability of the SSL-VPN component of the FortiPAM account management system, the FortiOS operating system, the local software development platform FortiSwitch Manager, and the FortiProxy proxy server for internet attack protection is related to the lack of security measures for the websi...
SSL-VPN Reflected XSS
...
EUVD-2025-209452
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' CWE-22 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions,...
Fortinet FortiSwitchAXFixed Access Control Command Execution
The vulnerability of Fortinet FortiSwitchAXFixed microprogramming software is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary system commands using a specially created SSH configuration file...
Fortinet FortiSwitchAXFixed Buffer Overflow RCE
The vulnerability of Fortinet FortiSwitchAXFixed microprogrammed software is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted LLDP packet...
EUVD-2026-10515
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
EUVD-2026-10516
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
CVE-2026-22627
A buffer copy without checking size of input 'classic buffer overflow' vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an unauthenticated attacker within the same adjacent network to execute unauthorized code or commands on the device via sending a crafted LLDP packet...
CVE-2026-22627
CVE-2026-22627 affects Fortinet FortiSwitch AX Fixed 1.0.0 through 1.0.1. The vulnerability is a buffer copy without input size checking in LLDP packet handling, enabling an unauthenticated attacker on the same adjacent network to run arbitrary code or commands on the device. Impact per the entry...
CVE-2026-22628
An improper access control vulnerability in Fortinet FortiSwitchAXFixed 1.0.0 through 1.0.1 may allow an authenticated admin to execute system commands via a specifically crafted SSH config file...
shell command limitation bypass by SSH local config overriding
...
Buffer Overflow in LLDP OUI field
...
CVE-2025-49201
CVE-2025-49201 concerns Fortinet FortiPAM (versions 1.0.0–1.5.0) and FortiSwitchManager (7.2.0–7.2.4). Multiple sources confirm a weak authentication mechanism that enables an attacker to execute unauthorized code or commands by sending specially crafted HTTP requests, i.e., remote code execution...