898 matches found
Null Pointer Dereference in Log Report
...
Workflow session email approval process bypass
...
Uncontrolled Resource Consumption in SNMP
...
Cron Job Injection in Remote Backup
...
ZTNA Portal Improper Certificate Validation
...
Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information
...
Stack buffer overflow in WAD
...
FGFM Authentication Weakening via CLI Configuration
...
HTTP/2 Bomb CVE-2026-49975
...
Header injection in Web Filter warning page
...
Path traversal in CLI command allows deletion of root file system
...
Unauthenticated VNC access exposed on all interfaces
...
Buffer overread in authd and wad daemon
...
Header injection in captive portal authentication form
...
Stack Buffer Overflow in Log Report
...
SSL-VPN Reflected XSS
...
Second-Order OS Command Injection via JSON Input on start vnc feature
...
Restricted CLI escape using Lua
...
Command injection in CLI
...
Incorrect global authorization
...
OS command injection in CLI
...
DoS due to unsafe function in signal handler
...
Out-of-bounds access in CAPWAP daemon
...
Credential disclosure in LDAP configuration web page.
...
Arbitrary directory delete on vmimages delete feature
...
Reflected XSS in Operation Center
...
Multiple Stored XSS
...
Path Traversal in CLI
...
OS Command Injection through API endpoint
...
Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
...
Heap-based buffer overflow in oftpd daemon
...
Missing Authentication for critical function in CAPWAP daemon
...
Path Traversal in CLI
...
SQL Injection via JSON RPC API
...
Buffer overflow via fgtupdates service
...
Privilege escalation using undocumented CLI command
...
SQL injection in jsonrpc api
...
Lack of TLS Certificate Validation during initial SSO Authentication
...
Format string vulnerability in fazsvcd
...
shell command limitation bypass by SSH local config overriding
...
XSS in LDAP server option
...
Authentication Lockout Bypass via Race Condition
...
Buffer Overflow in LLDP OUI field
...
OS command injection on vmimages update feature
...
MFA Bypass in GUI
...
SSL-VPN Symlink Persistence Patch Bypass
...
LDAP authentication bypass in Agentless VPN and FSSO
...