898 matches found
Format String Vulnerability in CAPWAP fast-failover mode
...
SSL-VPN Symlink Persistence Patch Bypass
...
OpenSSL CVE-2025-15467
...
Administrative FortiCloud SSO authentication bypass
...
SSRF in GUI console
...
Heap-based buffer overflow in cw_acd daemon
...
Insertion of sensitive information into REST API logs
...
OS command injection in multiple endpoints
...
Multiple Fortinet Products' FortiCloud SSO Login Authentication Bypass
...
Insufficient Session Expiration in SSLVPN
...
Multiple authenticated OS Command Injections via API
...
Reflected XSS in HA cluster
...
OS command injection in GUI backup options
...
Private key readable by admin
...
Stack buffer overflow in CAPWAP daemon
...
File scan result bypass
...
Trusted hosts bypass via SSH
...
Authenticated CLI Commands Buffer Overflow
...
Credential leakage through debug commands
...
Stack buffer overflow in CAPWAP daemon
...
Missing authentication check in OFTP service
...
Weak authentication in WAD/GUI
...
Authenticated Heap Overflow in SSL-VPN bookmarks
...
Improper autorization over static files
...
Race condion in FortiCloud SSO SAML authentication
...
Domain fronting protection bypass in explicit web proxy
...
Heap Overflow in fgfmsd
...
Multiple Unchecked Return Value leading to Null Pointer Dereference
...
Stack-based buffer overflow on fortitoken import feature
...
Insertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon
...
ZTNA Server Improper Certificate Validation
...
FGFM protocol allows unauthenticated reset of the connection
...
Heap buffer overflow in websocket
...
Restricted CLI command bypass
...
Insufficient Session Expiration in SSLVPN using SAML authentication
...
Insertion of Sensitive 2FA Information in logs and debug command
...
Open Redirect and XSS in Web Filter warning page
...
Arbitrary file overwrite in FGFMd
...
Weak authentication - FGFM protocol
...
Incorrect Privilege Assignment in Security Fabric
...
Double free in automation-stitch
...
Integer Overflow on SSL-VPN bookmarks
...
PKI via API: Authentication granted with an invalid certificate
...
SQL injection in forward module
...
Session still active for deleted admin
...
DNS type 65 resource record requests bypass DNS filter
...
Heap-based buffer overflow in cw_stad daemon
...
Buffer overflow in fgfmd
...