898 matches found
Unverified password change via set_password endpoint
...
Multiple format string vulnerabilities
...
Out-of-bounds Write in IPSEC Daemon
...
Null pointer dereference leading to sslvpn DOS
...
Arbitrary file write on GUI
...
Path traversal vulnerability leading to file creation
...
Sensitive files disclosure in diagnostic logs download
...
OpenSSH regreSSHion Attack (CVE-2024-6387)
...
Authorization bypass in SSLVPN bookmarks
...
Out-of-bounds Write in captive portal
...
HTTP/2 Bomb CVE-2026-49975
...
Multiple Stored XSS
...
Firewall policy bypass in FSSO Terminal Services Agent
...
LDAP authentication bypass in Agentless VPN and FSSO
...
OpenSSL CVE-2025-15467
...
Trusted hosts bypass via SSH
...
FGFM protocol allows unauthenticated reset of the connection
...
Firewall session injection in FGSP
...
Information Disclosure on SSLVPN endpoint
...
Unauthorized modification of global threat feeds
...
Use of hardcoded key used for remote backup server password encryption
...
Missing authentication for managed device configuration files
...
Arbitrary file delete on firmware import image feature
...
Priviledged admin able to view device summary for device in different ADOM
...
Cross site scripting vulnerability in SSL VPN web UI
...
Multiple buffer overflows in diag npu command
...
Format String Bug in HTTPSd
...
Firewall deny policy bypass
...
DOS in headers management
...
Path traversal via unrestricted file upload
...
Stack buffer overflow in WAD
...
UI DoS attack
...
Arbitrary directory delete on vmimages delete feature
...
Path Traversal in CLI
...
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
...
SQL injection in jsonrpc api
...
Authentication Lockout Bypass via Race Condition
...
OS command injection in multiple endpoints
...
Insufficient Session Expiration in SSLVPN
...
Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass
...
Insertion of sensitive information into REST API logs
...
Heap buffer overflow in websocket
...
Weak authentication - FGFM protocol
...
PKI via API: Authentication granted with an invalid certificate
...
Heap-based buffer overflow in cw_stad daemon
...
Insufficient Session Expiration in SSL-VPN cookie
...
SSH key is added even if operation is aborted
...
Privilege escalation in automation-stitch
...