6525 matches found
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient Endpoint Management Server EMS deployments to deliver a credential-stealing malware family dubbed EKZ Infostealer. "The campaign abused trusted endpoint management infrastructure to deliver malware...
Exploit for Use of Externally-Controlled Format String in Fortinet Fortiproxy
Disclaimer The code and materials contained in this repository...
Exploit for Path Traversal in Fortinet Fortiproxy
CVE-2018-13379 — Mass Exploit for Fortine...
Fortinet FortiAP operating system command injection vulnerability (CNVD-2026-25589)
Fortinet FortiAP is a controller developed by the American company Fortinet, used for managing wireless access point devices. There are vulnerabilities related to operating system command injection in Fortinet FortiAP and FortiAP-W2. These vulnerabilities stem from improper neutralization of...
Fortinet FortiOS buffer overflow vulnerability (CNVD-2026-25593)
Fortinet FortiOS is a security operating system developed by Fortinet, a US-based company, and specifically designed for use on the FortiGate network security platform. This system offers users various security features, including firewalls, antivirus protection, IPSec/SSLVPN, web content...
Fortinet FortiMail SQL injection vulnerability (CNVD-2026-25591)
Fortinet FortiMail is a set of email security gateway products developed by the American company Fortinet. This product provides features such as email security protection and data protection. Fortinet FortiMail has a SQL injection vulnerability. This vulnerability stems from improper...
Fortinet FortiNDR SQL injection vulnerability (CNVD-2026-25592)
Fortinet FortiNDR is a network detection and response solution provided by the American company Fortinet. Fortinet FortiNDR has a SQL injection vulnerability. This vulnerability stems from improper handling of special elements within SQL commands. Attackers can exploit this vulnerability to execu...
Fortinet FortiAuthenticator Access Control Vulnerability (CNVD-2026-25590)
Fortinet FortiAuthenticator is a centralized user identity management solution provided by the American company Fortinet. There is an access control vulnerability in Fortinet FortiAuthenticator. This vulnerability stems from improper access control; attackers can exploit this vulnerability to...
CVE-2026-44278
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via...
CVE-2025-67604
creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios...
CVE-2025-53844
creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios 2026-05-17 22:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mm3epeyxsy2u...
CVE-2025-53870
creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios...
CVE-2025-53680
creationtimestamp| type| source ---|---|--- 2026-05-14 00:08:08+00:00| seen| https://ccb.belgium.be/advisories/warning-multiple-critical-high-and-medium-vulnerabilities-fortinet-fortisandbox-fortios...
The vulnerability of the CAPWAP (Control and Provisioning of Wireless Access Points) component in Fortinet’s FortiOS operating systems allows a hacker to execute arbitrary code.
The vulnerability of the CAPWAP Control and Provisioning of Wireless Access Points component in Fortinet’s FortiOS operating systems is related to buffer overflow attacks. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted packets...
The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...
The vulnerability of the command-line interface (CLI) of Fortinet’s FortiAP and FortiAP-W2 access points allows a attacker to execute arbitrary commands.
The vulnerability of the command-line interface CLI of Fortinet’s FortiAP and FortiAP-W2 microprogramming solutions lies in the lack of measures taken to neutralize the special elements used in operating system commands. Exploiting this vulnerability allows an attacker to execute arbitrary comman...
Vulnerability concealment in Fortinet FortiAuthenticator
Fortinet has identified a vulnerability in FortiAuthenticator. This vulnerability relates to incorrect access control in FortiAuthenticator, allowing attackers to execute unauthorized code or commands. This occurs due to insufficient restrictions in the access control mechanism within the softwar...
Vulnerability handling in Fortinet FortiSandbox
Fortinet has identified a vulnerability in FortiSandbox and FortiSandbox PaaS versions. The vulnerability involves an absence of authorization checks, allowing unauthorized attackers to execute unauthorized code or commands through specially crafted HTTP requests. This issue arises due to...
EUVD-2026-29730
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2, FortiClientWindows 7.2 all versions may allow attacker to information disclosure via...
EUVD-2025-209802
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets...