CVE-2022-39952-better

FortiNAC CVE-2022-39952 PoC pour CVE-2022-39952 affectant Fortinet FortiNAC. Cet exploit permet à un attaquant d'exécuter des commandes arbitraires sur le serveur FortiNAC. Il est basé sur le PoC développé par horizon3ai, avec des options supplémentaires pour cibler plusieurs hôtes. Avertissement...

fortinet-cve-2024-50562

Vulnérabilité de réutilisation de session SSL-VPN Fortinet CVE-2024-50562 Scanner professionnel, sur autorisation uniquement qui vérifie si un FortiGate invalide les cookies de session après une déconnexion. Un résultat positif confirme CVE-2024-50562 — une faille d'expiration de session...

Belsen_Group-et-exploitation-de-la-CVE-2022-40684

BelsenGroup et exploitation de la CVE-2022-40684 Mise en contexte Le 29 janvier 2025, un utilisateur du forum cybercriminel BelsenGroup a publié un message affirmant détenir 15,000 équipements Fortinet compromis, avec des fichiers de configuration et des mots de passe VPN. Il propose désormais...

cve-2025-64446-fortiweb-exploit

CVE-2025-64446 - Exploit de traversée de chemin avec RCE sur Fortinet FortiWeb Outil de recherche en sécurité pour détecter et tester la vulnérabilité CVE-2025-64446 sur le pare-feu applicatif Web WAF Fortinet FortiWeb. Cette vulnérabilité critique de type zero-day de traversée de chemin a été...

CVE-2026-39808

CVE-2026-39808 Fortinet FortiSandbox 4.4.0-4.4.8 - Injection de commandes OS via le point de terminaison tracer-behavior Fortinet FortiSandbox est une solution avancée de protection contre les menaces qui crée des environnements isolés pour analyser les fichiers suspects, les URL et le trafic...

CVE-2022-40684

CVE-2022-40684 POC pour CVE-2022-40684 affectant les appliances Fortinet FortiOS, FortiProxy et FortiSwitchManager. Analyse technique Une analyse technique de la cause racine de la vulnérabilité est disponible sur notre blog :...

Exploit for OS Command Injection in Fortinet Fortisandbox

CVE-2026-39808 — Fortinet FortiSandbox OS Command Injection...

Fortijump-Exploit-CVE-2024-47575

CVE-2024-47575 Fortinet FortiManager Exécution de code à distance non authentifiée alias FortiJump CVE-2024-47575 Consultez notre article de blog pour les détails techniques Pour commencer, établissez votre session ncat : nc -lvvnp 80 Ensuite, exécutez notre générateur d'artefacts de détection :...

fortinet-fortiweb-cve-2025-64446-58034

Fortinet FortiWeb 취약점 CVE-2025-64446, CVE-2025-58034 이해하기 1. 개요 Fortinet FortiWeb은 기업 시스템에서 널리 배포되어 웹 애플리케이션을 일반적인 위협으로부터 보호하는 WAFWeb Application Firewall 장비입니다. FortiWeb은 일반적으로 중앙 보호 계층에 위치하므로, 인증 또는 OS 명령 실행과 관련된 취약점은 백엔드 인프라 전체에 심각한 영향을 미칠 수 있습니다. 2025년에 FortiWeb에서 두 가지 심각한 취약점이 공개되었습니다:...

cve2018-13379-nmap-script

cve2018-13379-nmap-script CVE-2018-13379 Script pour Nmap NSE Une limitation incorrecte d'un chemin d'accès à un répertoire restreint "Path Traversal" dans Fortinet FortiOS 6.0.0 à 6.0.4, 5.6.3 à 5.6.7 via le portail web SSL VPN permet à un attaquant non authentifié de télécharger des fichiers...

FortiLogger 4.4.2.2 - Arbitrary File Upload

FortiLogger 4.4.2.2 is affected by arbitrary file upload issues. Attackers can send a "Content-Type: image/png" header to Config/SaveUploadedHotspotLogoFile and then Assets/temp/hotspot/img/logohotspot.asp. id: CVE-2021-3378 info: name: FortiLogger 4.4.2.2 - Arbitrary File Upload author:...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-104286link is external Fortinet FortiMail Path Traversal Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors and...

VulnCheck KEV: CVE-2026-104286

Fortinet FortiMail contains a path traversal and an improper neutralization of NULL byte or NULL character vulnerability that may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests...

Fortinet FortiAnalyzer Uncontrolled Resource Consumption in SNMP (FG-IR-26-172)

The version of FortiAnalyzer installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-172 advisory. - A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denia...

Fortinet FortiNAC - Arbitrary File Write

Fortinet FortiNAC is susceptible to arbitrary file write. An external control of the file name or path can allow an attacker to execute unauthorized code or commands via specifically crafted HTTP request, thus making it possible to obtain sensitive information, modify data, and/or execute...

EUVD-2026-84423

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

CVE-2026-84388: Improper Restriction of Rendered UI Layers or Frames

A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions, FortiPAM Chrome Extension 7.4 all versions may allow attacker to information disclosure via remote unauthenticated attack...

The vulnerability of the Fortinet Privileged Access Agent for Chrome, related to authentication procedures’ flaws, allows attackers to compromise the confidentiality and integrity of protected information.

The vulnerability of the Fortinet Privileged Access Agent for Chrome is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...