898 matches found
Workflow session email approval process bypass
...
Uncontrolled Resource Consumption in SNMP
...
Null Pointer Dereference in Log Report
...
ZTNA Portal Improper Certificate Validation
...
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
...
Cron Job Injection in Remote Backup
...
Stack buffer overflow in WAD
...
FGFM Authentication Weakening via CLI Configuration
...
HTTP/2 Bomb CVE-2026-49975
...
UI DoS attack
...
Header injection in Web Filter warning page
...
Path traversal in CLI command allows deletion of root file system
...
Unauthenticated VNC access exposed on all interfaces
...
Header injection in captive portal authentication form
...
Buffer overread in authd and wad daemon
...
Stack Buffer Overflow in Log Report
...
SSL-VPN Reflected XSS
...
Second-Order OS Command Injection via JSON Input on start vnc feature
...
Restricted CLI escape using Lua
...
Command injection in CLI
...
Incorrect global authorization
...
OS command injection in CLI
...
DoS due to unsafe function in signal handler
...
Out-of-bounds access in CAPWAP daemon
...
Multiple Stored XSS
...
Reflected XSS in Operation Center
...
Credential disclosure in LDAP configuration web page.
...
Arbitrary directory delete on vmimages delete feature
...
Path Traversal in CLI
...
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
...
OS Command Injection through API endpoint
...
Missing Authentication for critical function in CAPWAP daemon
...
Heap-based buffer overflow in oftpd daemon
...
SQL Injection via JSON RPC API
...
Path Traversal in CLI
...
Privilege escalation using undocumented CLI command
...
shell command limitation bypass by SSH local config overriding
...
Format string vulnerability in fazsvcd
...
SQL injection in jsonrpc api
...
Authentication Lockout Bypass via Race Condition
...
Buffer overflow via fgtupdates service
...
Lack of TLS Certificate Validation during initial SSO Authentication
...
XSS in LDAP server option
...
OS command injection on vmimages update feature
...
Buffer Overflow in LLDP OUI field
...
MFA Bypass in GUI
...
SSL-VPN Symlink Persistence Patch Bypass
...
LDAP authentication bypass in Agentless VPN and FSSO
...