CVE-2023-25610

Fortinet CVE-2023-25610 is a buffer underwrite in the FortiOS/FortiProxy administrative interface that allows remote, unauthenticated execution of code via crafted requests. Affected firmware ranges include FortiOS 7.2.0–7.2.3, 7.0.0–7.0.6, 6.4.0–6.4.11, 6.2.12 and below, FortiProxy 7.2.0–7.2.2, ...

CVE-2023-29181

CVE-2023-29181 is a vulnerability caused by a use of an externally-controlled format string (CWE-134) in Fortinet products, including FortiOS, FortiProxy, and FortiPAM, across multiple versions (FortiOS 7.x/6.x, FortiProxy, FortiPAM) that allows a remote attacker to execute arbitrary code or comm...

CVE-2023-29180

CVE-2023-29180 is a NULL pointer dereference in Fortinet FortiOS and FortiProxy that can cause a denial of service via specially crafted HTTP requests. Affected: FortiOS 7.2.0–7.2.4, 7.0.0–7.0.11, 6.4.0–6.4.12, 6.2.0–6.2.14, 6.0.0–6.0.16; FortiProxy 7.2.0–7.2.3, 7.0.0–7.0.10, 2.0.0–2.0.12, 1.2.0–...

CVE-2018-13379

CVE-2018-13379 is a path traversal vulnerability in Fortinet FortiOS SSL VPN web portal that allows an unauthenticated attacker to download system files via crafted HTTP requests. Affected products/versions include FortiOS 6.0.0–6.0.4, 5.6.3–5.6.7, 5.4.6–5.4.12 and FortiProxy 2.0.0, 1.2.0–1.2.8, ...

CVE-2022-40684

CVE-2022-40684 is an authentication bypass affecting Fortinet products: FortiOS (versions 7.2.0–7.2.1 and 7.0.0–7.0.6), FortiProxy (7.2.0 and 7.0.0–7.0.6), and FortiSwitchManager (7.2.0 and 7.0.0). The flaw enables an unauthenticated attacker to perform administrative interface operations via spe...

CVE-2023-27997

CVE-2023-27997 is a heap-based buffer overflow in Fortinet FortiOS SSL‑VPN (and FortiProxy) that allows remote code execution via specially crafted requests. Affected families include FortiOS: 7.2.x <=7.2.4, 7.0.x <=7.0.11, 6.4.x <=6.4.12, 6.0.x <=6.0.16; FortiProxy: 7.2.x <=7.2.3,...

CVE-2018-13382

CVE-2018-13382 is an Improper Authorization vulnerability in Fortinet FortiOS (versions 6.0.0–6.0.4, 5.6.0–5.6.8, 5.4.1–5.4.10) and FortiProxy (2.0.0; 1.2.0–1.2.8; 1.1.0–1.1.6; 1.0.0–1.0.7) exposed via the SSL VPN web portal. An unauthenticated attacker can modify the password of an SSL VPN porta...

CVE-2024-21762

CVE-2024-21762 is an unauthorized out-of-bounds write flaw in Fortinet FortiOS FortiProxy SSL VPN, exploitable via crafted HTTP requests to the SSL VPN interface (notably /remote/hostcheck_validate). Supported disclosures show impact as remote code execution with potential full device compromise....

CVE-2018-13383

CVE-2018-13383 describes a heap buffer overflow in Fortinet FortiOS and FortiProxy SSL VPN web portal. Affected products include FortiOS 6.0.0–6.0.4, 5.6.0–5.6.10, 5.4.0–5.4.12, 5.2.14 and earlier and FortiProxy 2.0.0, 1.2.8 and earlier. The vulnerability arises from improper handling of Javascri...

CVE-2022-42475

Fortinet FortiOS SSL-VPN (and FortiProxy SSL-VPN) suffer a heap-based buffer overflow (CWE-122) leading to remote code execution. A remote unauthenticated attacker can trigger via crafted requests, affecting FortiOS/FortiProxy versions up to 7.2.2, 7.0.x, 6.4.x, 6.2.x, 6.0.x and earlier. CVSS v3....

CVE-2026-24858

CVE-2026-24858 is a high-severity authentication bypass affecting Fortinet FortiAnalyzer, FortiManager, FortiOS, FortiProxy, and FortiWeb (various 7.x versions) via FortiCloud SSO. The issue allows an attacker with a FortiCloud account and a registered device to log into other devices registered ...

CVE-2024-55591

CVE-2024-55591 is a critical authentication bypass affecting FortiOS and FortiProxy. Public PoCs describe remote exploitation via WebSocket/Telnet management interfaces to gain super-admin privileges without valid credentials. Affected versions include FortiOS 7.0.0–7.0.16 and FortiProxy 7.0.0–7....

CVE-2024-23113

CVE-2024-23113 is a format-string vulnerability in Fortinet FortiOS, FortiProxy, FortiPAM, and FortiSwitchManager. An attacker can trigger remote code execution by sending specially crafted packets that influence format-string processing in affected components. Affected versions include FortiOS 7...

CVE-2026-59839

CVE-2026-59839 describes a path traversal vulnerability: improper limitation of a pathname to a restricted directory in Fortinet products, affecting FortiOS (versions 7.6.0–7.6.6, 7.4.0–7.4.9, 7.2.x, 7.0.x, 6.4.x), FortiPAM (1.8.0 down to 1.0, all 1.x releases), and FortiProxy (7.6.0–7.6.5, 7.4–7...

CVE-2025-59718

CVE-2025-59718/59719 describe an improper verification of cryptographic signatures that allows an unauthenticated attacker to bypass Fortinet FortiCloud SSO login via a crafted SAML response. Affected products span FortiOS (multiple versions up to 7.6.3, and earlier lines listed), FortiProxy, For...

CVE-2025-24472

CVE-2025-24472 affects Fortinet FortiOS (7.0.0–7.0.16) and FortiProxy (7.2.0–7.2.12, also 7.0.0–7.0.19 in some sources) with an authentication bypass (CWE-288) that can grant super-admin privileges on downstream devices when Security Fabric is enabled. exploitation requires crafting CSF proxy req...

CVE-2018-13380

CVE-2018-13380 affects Fortinet FortiOS and FortiProxy: FortiOS versions 6.0.0–6.0.4, 5.6.0–5.6.7, 5.4.0–5.4.12, and 5.2 and below; FortiProxy 2.0.0 and 1.2.8 and below. It is a client-side cross-site scripting (XSS) vulnerability in the SSL VPN web portal, allowing an attacker to execute arbitra...

CVE-2026-23573

Technical details for CVE-2026-23573 are not publicly available in the provided documents. Monitor for updates from Fortinet PSIRTs and NVD for affected products and fixes.

CVE-2023-42789

Summary (CVE-2023-42789) A out-of-bounds write in Fortinet FortiOS and FortiProxy allows remote unauthenticated code execution via specially crafted HTTP requests, mainly via the captive portal. Affected FortiOS: 6.2.0–6.2.15, 6.4.0–6.4.14, 7.0.0–7.0.12, 7.2.0–7.2.5, 7.4.0–7.4.1. Affected FortiPr...

CVE-2018-13381

Fortinet CVE-2018-13381 affects FortiOS up to 6.0.4, 5.6.x up to 5.6.7, 5.4 and earlier, and FortiProxy SSL VPN 2.0.0/1.2.8 and earlier. A buffer overflow in the SSL VPN web portal (via a specially crafted message payload) allows an unauthenticated remote attacker to cause a Denial-of-Service by ...

CVE-2023-41677

CVE-2023-41677 affects Fortinet FortiProxy and FortiOS versions listed in the description, where a vulnerability due to insufficient protection of credentials could let an attacker execute unauthorized code or commands through a targeted social engineering attack. The issue is documented across m...

CVE-2025-62675

The CVE-2025-62675 entry concerns an issue described as an Improper Neutralization of CRLF Sequences in HTTP Headers (HTTP Response Splitting) in Fortinet FortiOS and FortiProxy products. Affected versions are FortiOS 7.6.0–7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6...

CVE-2026-59840

Fortinet FortiOS (7.6.0–7.6.2, 7.4.0–7.4.8, 7.2 all) and FortiProxy (7.6.0–7.6.5, 7.4.0–7.4.13, 7.2 all) are affected by a buffer over-read that may lead to information disclosure. Root cause described as a buffer over-read affecting multiple Fortinet products; the exact attack vector is not spec...

CVE-2025-22252

CVE-2025-22252 describes a missing authentication for critical functions in Fortinet products: FortiProxy (7.6.0–7.6.1), FortiSwitchManager (7.2.5), and FortiOS (7.4.4–7.4.6 and 7.6.0). The root cause is an authentication bypass that could let an attacker who knows an existing admin account acces...

CVE-2024-45324

CVE-2024-45324 describes an externally-controlled format string vulnerability (CWE-134) in Fortinet products, allowing a privileged attacker to execute unauthorized code via specially crafted HTTP/HTTPS commands. Affected are FortiOS (versions 7.4.0–7.4.4; 7.2.0–7.2.9; 7.0.0–7.0.15 and before 6.4...

CVE-2021-43072

CVE-2021-43072 is a buffer overflow caused by an unchecked buffer copy in Fortinet products exposed via CLI over TFTP (execute restore image/execute certificate remote). Affected: FortiAnalyzer, FortiManager, FortiOS, and FortiProxy across listed versions; FortiOS ranges include 7.0.x (7.0.0–7.0....

CVE-2022-41335

CVE-2022-41335 describes a relative path traversal in Fortinet FortiOS (versions 7.2.0–7.2.2, 7.0.0–7.0.8, before 6.4.10), FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7, before 2.0.10), and FortiSwitchManager (7.2.0 and before 7.0.0). An authenticated attacker can read and write files on the underlying Li...

CVE-2025-54821

CVE-2025-54821 affects Fortinet FortiOS (versions 6.4 and 7.0–7.6.3), FortiPAM (1.0–1.6.0), and FortiProxy (7.0–7.6.3). The root cause is improper privilege management (CWE-269) that may allow an authenticated administrator to bypass the trusted-host policy via crafted CLI commands. Public source...

CVE-2022-35843

CVE-2022-35843 affects FortiOS SSH login component (and FortiProxy SSH) across multiple versions, allowing remote, unauthenticated login via a crafted Access-Challenge response from RADIUS. Affected: FortiOS 6.0–7.2.0 and 6.2–6.4.9; FortiProxy 1.2.0–2.0.10 and 7.0.0–7.0.5. Root cause described as...

CVE-2023-29179

Fortinet FortiOS and FortiProxy are affected by CVE-2023-29179 (null pointer dereference) which can be triggered by specially crafted HTTP requests, causing a denial of service. Affects FortiOS versions 7.2.0–7.2.4, 7.0.0–7.0.11, 6.4.0–6.4.12 and Fortiproxy 7.2.0–7.2.4, 7.0.0–7.0.10. Mitigation: ...

CVE-2023-29183

CVE-2023-29183 describes an authenticated Cross-Site Scripting (XSS) vulnerability in FortiOS/FortiProxy GUI via the guest management setting. Affects FortiOS/FortiProxy versions including FortiOS 7.2.0–7.2.4, 7.0.0–7.0.11, 6.4.0–6.4.12, 6.2.0–6.2.14; Fortinet’s PSIRT FG-IR-23-106 confirms the is...

CVE-2023-42790

CVE-2023-42790 is a remote code execution risk due to a stack-based buffer overflow in Fortinet FortiOS and FortiProxy. Affected versions include FortiOS 6.2.0–6.2.15, 6.4.0–6.4.14, 7.0.0–7.0.12, 7.2.0–7.2.5, 7.4.0–7.4.1 and FortiProxy 2.0.0–2.0.13, 7.0.0–7.0.12, 7.2.0–7.2.6, 7.4.0. Exploitation ...

CVE-2025-22254

CVE-2025-22254 affects Fortinet FortiOS (7.6.0–7.6.1, 7.4.0–7.4.6, 7.2.0–7.2.10, 7.0.0–7.0.16, 6.4.0–6.4.15), FortiProxy (7.6.0–7.6.1, 7.4.0–7.4.7) and FortiWeb (7.6.0–7.6.1, 7.4.0–7.4.6). Root cause: Improper Privilege Management (CWE-269) allowing an authenticated user with at least read-only a...

CVE-2025-62826

Summary: CVE-2025-62826 describes an HTTP Response Splitting (CWE-113) in Fortinet FortiOS and FortiProxy products. Affected versions: FortiOS 7.6.0–7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions; FortiProxy 7.6.0–7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions. Root ca...

CVE-2022-22299

CVE-2022-22299 is a format-string vulnerability (CWE-134) affecting the CLI interpreters of FortiADC, FortiProxy, FortiOS, and FortiMail. Affected ranges include FortiADC 6.0.0–6.2.1; FortiProxy 1.0.0–2.0.7 and 7.0.0–7.0.1; FortiOS 6.0.0–6.4.8 and 7.0.0–7.0.2; FortiMail 6.4.0–7.0.2. The issue ari...

CVE-2023-22640

CVE-2023-22640 describes an out-of-bounds write in Fortinet FortiOS (versions 7.2.0–7.2.3, 7.0.0–7.0.10, 6.4.0–6.4.11, 6.2.0–6.2.13, 6.0) and FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7, 2.0, 1.2, 1.1, 1.0) that allows an authenticated attacker to execute arbitrary code or commands via crafted requests....

CVE-2024-23112

This CVE affects Fortinet FortiOS and FortiProxy SSL-VPN bookmarks. Affected components are the SSL-VPN bookmark handling, where an authenticated attacker may bypass authorization via URL manipulation to access another user’s bookmarks. Affected FortiOS/ FortiProxy versions include: FortiOS 6.4.7...

CVE-2021-43081

The CVE-2021-43081 entry corresponds to an XSS vulnerability (CWE-79) in Fortinet FortiOS and FortiProxy where an unauthenticated attacker can inject crafted input through the web filter override form and trigger cross-site scripting via HTTP GET requests. Affected products and versions include F...

CVE-2024-50568

CVE-2024-50568 affects Fortinet FortiOS and FortiProxy: a non-endpoint channel vulnerability (CWE-300) allows an unauthenticated attacker with device-specific data to spoof the identity of a downstream device in the security fabric via crafted TCP requests. Affected versions include FortiOS 7.0.0...

CVE-2024-48884

CVE-2024-48884 affects Fortinet products including FortiManager (7.6.0–7.6.1, 7.4.1–7.4.3, FortiManager Cloud 7.4.1–7.4.3), FortiOS (7.6.0, 7.4.0–7.4.4, 7.2.0–7.2.9, 7.0.0–7.0.15, 6.4.0–6.4.15), FortiProxy (7.4.0–7.4.5, 7.2.0–7.2.11, 7.0.0–7.0.18, 2.0 all versions, 1.2 all versions, 1.1 all versi...

CVE-2023-33308

CVE-2023-33308 impacts Fortinet FortiOS (versions 7.0.0–7.0.10, 7.2.0–7.2.3) and FortiProxy (7.0.0–7.0.9, 7.2.0–7.2.2). A stack-based overflow (CWE-124) may allow a remote, unauthenticated attacker to execute arbitrary code via crafted packets that reach proxy or firewall policies when SSL deep p...

CVE-2023-36641

CVE-2023-36641 is a DoS vulnerability caused by a numeric truncation error in Fortinet FortiProxy/FortiOS. Affected products include FortiProxy 1.0–2.0 and FortiOS 6.x–7.x, with exploits triggered by specially crafted HTTP requests. Red Hat, CNVD, and other sources corroborate the DoS impact and ...

CVE-2024-21754

The FortiOS and FortiProxy operating systems are vulnerable to a password hashing flaw (CWE-916 ) due to insufficient computational effort . This weakness allows a privileged attacker with a super-admin profile and CLI access to decrypt backup files. Affected versions include FortiOS 7.4.3 and be...

CVE-2024-26010

CVE-2024-26010 is a stack-based buffer overflow affecting multiple Fortinet products (FortiPAM, FortiWeb, FortiAuthenticator, FortiSwitchManager, FortiOS, FortiProxy, etc.) across many versions. The underlying flaw allows an attacker to execute unauthorized code or commands via specially crafted ...

CVE-2025-25248

Fortinet CVE-2025-25248 is an Integer Overflow (CWE-190) affecting FortiOS and related Fortinet SSL-VPN components, including FortiOS, FortiProxy, and FortiPAM. The issue concerns SSL-VPN RDP and VNC bookmarks that may allow an authenticated user to affect device availability via crafted requests...

CVE-2024-48886

CVE-2024-48886 concerns Fortinet products (FortiOS, FortiProxy, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud) with a weak authentication flaw that allows an attacker to execute unauthorized code or commands via brute-force. The initial description lists affected versions across FortiOS: ...

CVE-2023-22639

CVE-2023-22639 is an out-of-bounds write vulnerability affecting Fortinet FortiOS and FortiProxy. The issue allows an attacker to escalate privileges via specially crafted CLI/commands. Affected products/versions include FortiOS: 7.2.0–7.2.3, 7.0.0–7.0.10, 6.4.0–6.4.12, 6.2.x, 6.0.x; FortiProxy: ...

CVE-2022-42472

CVE-2022-42472 affects Fortinet FortiOS and FortiProxy prior to fixed builds, with an HTTP Response Splitting issue caused by improper CRLF neutralization in HTTP headers. The vulnerability allows an authenticated, remote attacker to perform an HTTP request splitting attack and gain control over ...

CVE-2022-45862

CVE-2022-45862 describes an insufficient session expiration flaw in Fortinet products (FortiOS, FortiProxy, FortiPAM, FortiSwitchManager) that may allow an attacker to reuse a GUI web session after logout if the attacker has the required credentials. Affected versions include FortiOS 7.2.5 and ea...

CVE-2020-6648

CVE-2020-6648 affects FortiOS (CLI) and FortiProxy, with a cleartext storage of passwords via the CLI diagnostic command diag sys ha checksum show. Affected: FortiOS 6.2.4 and earlier; FortiProxy 2.0.0, 1.2.9 and earlier. Root cause is information disclosure through CLI; exploited by an authentic...