898 matches found
Insufficient Session Expiration in SSL-VPN cookie
...
eap-cert-auth bypass via revoked certificate
...
SSH key is added even if operation is aborted
...
Weak authentication in security fabric daemon
...
Privilege escalation in GUI websocket module
...
Privilege escalation in automation-stitch
...
Denial of Service in Security Fabric Root
...
TACACS+ authentication bypass
...
Unauthorized modification of global threat feeds
...
Buffer over-read in FGFM
...
No certificate name verification for fgfm connection
...
Use of uninitialized resource in SSLVPN websocket
...
LDAP Clear-text credentials retrievable with IP modification
...
Log Pollution via login page
...
Unverified password change via set_password endpoint
...
Authenticated SQLI on CLI
...
Incorrect authorization in GUI console
...
OS command injection in CLI command
...
Os command injection on vm download feature
...
Multiple format string vulnerabilities
...
error based SQLI on device del feature
...
OS Command Injection in administrative interface
...
Use of hardcoded key used for remote backup server password encryption
...
Pre-authentication Denial of Service attack in OpenSSH - CVE-2025-26466
...
Client-side enforcement of server-side security related to vm download feature
...
Permission escalation due to an Improper Privilege Management
...
Use of Hard-coded Cryptographic Key to encrypt sensitive data
...
Stack buffer overflow in fabric service
...
Insertion of sensitive information into Event log
...
Disclosure of Logs of Devices not belonging to the Current ADOM from Log View
...
Multiple Reflected and Stored Cross-Site Scripting
...
OS command injection in external connector
...
Multiple arbitrary file deletion in the CLI
...
FortiOS / FortiProxy / FortiPAM / FortiSwitchManager - Format string vulnerability in CLI commands
...
Exposure of sensitive information in RADIUS Accounting-Request
...
FortiAP - Restricted Shell Escape via CLI Command Injection
...
Out-of-bounds Write in IPSEC Daemon
...
Stack based buffer overflow in httpd
...
`Host` header injection
...
Authentication bypass in Node.js websocket module and CSF requests
...
Hardcoded Session Secret Leading to Unauthenticated Remote Code Execution
...
Null pointer dereference leading to sslvpn DOS
...
Missing authentication for managed device configuration files
...
Multiple privilege escalation
...
Arbitrary file write on GUI
...
Arbitrary file delete on firmware import image feature
...
Arbitrary file deletion in administrative interface
...