898 matches found
Workflow session email approval process bypass
...
Null Pointer Dereference in Log Report
...
Uncontrolled Resource Consumption in SNMP
...
Cron Job Injection in Remote Backup
...
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
...
ZTNA Portal Improper Certificate Validation
...
Stack buffer overflow in WAD
...
FGFM Authentication Weakening via CLI Configuration
...
HTTP/2 Bomb CVE-2026-49975
...
Header injection in Web Filter warning page
...
Unauthenticated VNC access exposed on all interfaces
...
Path traversal in CLI command allows deletion of root file system
...
SSL-VPN Reflected XSS
...
Stack Buffer Overflow in Log Report
...
Buffer overread in authd and wad daemon
...
Header injection in captive portal authentication form
...
Second-Order OS Command Injection via JSON Input on start vnc feature
...
Restricted CLI escape using Lua
...
Command injection in CLI
...
Incorrect global authorization
...
OS command injection in CLI
...
DoS due to unsafe function in signal handler
...
Out-of-bounds access in CAPWAP daemon
...
Credential disclosure in LDAP configuration web page.
...
Multiple Stored XSS
...
Arbitrary directory delete on vmimages delete feature
...
Reflected XSS in Operation Center
...
Path Traversal in CLI
...
OS Command Injection through API endpoint
...
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
...
Heap-based buffer overflow in oftpd daemon
...
Missing Authentication for critical function in CAPWAP daemon
...
Path Traversal in CLI
...
SQL Injection via JSON RPC API
...
Buffer overflow via fgtupdates service
...
Privilege escalation using undocumented CLI command
...
SQL injection in jsonrpc api
...
Lack of TLS Certificate Validation during initial SSO Authentication
...
Format string vulnerability in fazsvcd
...
shell command limitation bypass by SSH local config overriding
...
XSS in LDAP server option
...
Authentication Lockout Bypass via Race Condition
...
Buffer Overflow in LLDP OUI field
...
MFA Bypass in GUI
...
OS command injection on vmimages update feature
...
SSL-VPN Symlink Persistence Patch Bypass
...
LDAP authentication bypass in Agentless VPN and FSSO
...