CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Fortinet FortiOS and Multi-Product FortiCloud SSO Authentication Bypass Vulnerability (CVE-2026-24858) Critical Security Advisory
[Affected Scope] FortiOS, FortiManager, FortiAnalyzer, FortiProxy, FortiWeb, and FortiNAC-F devices with FortiCloud SSO authentication enabled
[Impact] An attacker with a valid FortiCloud account and a registered device can bypass authentication to log into other registered devices under different accounts, gaining full administrative control (CVSS 9.8, Active KEV)
[Mitigation] Immediately upgrade to the patched firmware versions or disable FortiCloud SSO administrator login on all affected devices
Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass via Improper Verification of SAML Cryptographic Signature (CVE-2025-59718)
[Affected Scope] FortiOS 7.0.0-7.0.17 / 7.2.0-7.2.11 / 7.4.0-7.4.8 / 7.6.0-7.6.3, FortiProxy 7.0.0-7.0.21 / 7.2.0-7.2.14 / 7.4.0-7.4.10 / 7.6.0-7.6.3, FortiSwitchManager 7.0.0-7.0.5 / 7.2.0-7.2.6.
[Impact] An unauthenticated remote attacker can bypass FortiCloud SSO authentication via a crafted SAML response message, gaining full administrative access to the affected device.
[Mitigation] Immediately upgrade to the patched firmware versions, or disable FortiCloud SSO login and restrict administrative access to trusted IP addresses as a temporary workaround.
Fortinet FortiOS and FortiProxy Authentication Bypass and Remote Super-Admin Privilege Escalation (CVE-2024-55591)
[Affected Scope] FortiOS versions 7.0.0 through 7.0.16, and FortiProxy versions 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12
[Impact] Remote unauthenticated attackers can bypass authentication via crafted requests to the Node.js websocket module, gaining full super-admin privileges
[Mitigation] Immediately upgrade to the patched firmware versions and restrict external access to the management interface
Fortinet FortiOS / FortiProxy / FortiPAM Format String Vulnerability (CVE-2024-23113) Remote Code Execution (RCE) Analysis and Mitigation Guide
[Affected Scope] FortiOS (7.0.0~7.0.13, 7.2.0~7.2.6, 7.4.0~7.4.2), FortiProxy (7.0.0~7.0.14, 7.2.0~7.2.8, 7.4.0~7.4.2), FortiPAM, and FortiSwitchManager specific versions
[Impact] Unauthenticated remote attackers can execute unauthorized code or commands with root privileges via specially crafted packets
[Mitigation] Upgrade to the official patched versions immediately, or disable the FGFM (FortiGate Federation Management) service on interfaces as a temporary workaround
Fortinet FortiOS and FortiProxy SSL-VPN Out-of-bounds Write Remote Code Execution Vulnerability (CVE-2024-21762) Critical Security Advisory
[Affected Scope] FortiOS versions 6.0 through 7.4.2 and FortiProxy versions 1.0 through 7.4.2 with SSL-VPN service enabled
[Impact] Unauthenticated remote attackers can execute arbitrary code or commands on the target system via specially crafted HTTP requests
[Mitigation] Immediately upgrade to the patched firmware versions, or disable the SSL-VPN service as a temporary workaround
Fortinet FortiOS and FortiProxy SSL-VPN Heap-based Buffer Overflow Vulnerability (CVE-2023-27997) Technical Advisory
[Affected Scope] FortiOS versions 7.2.4 and below, 7.0.11 and below, 6.4.12 and below, 6.0.16 and below; FortiProxy versions 7.2.3 and below, 7.0.9 and below, 2.0.12 and below, and all 1.2/1.1 versions with SSL-VPN enabled
[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target appliance via specifically crafted HTTP requests
[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the SSL-VPN service as a temporary workaround
Fortinet FortiOS and FortiProxy SSL-VPN Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVE-2022-42475) Security Advisory
[Affected Scope] FortiOS versions 7.2.0 to 7.2.2, 7.0.0 to 7.0.8, 6.4.0 to 6.4.10, 6.2.0 to 6.2.11, 6.0.15 and earlier; FortiProxy versions 7.2.0 to 7.2.1, 7.0.7 and earlier
[Impact] An unauthenticated remote attacker can execute arbitrary code or commands with root privileges on the target system by sending specifically crafted HTTP/HTTPS requests
[Mitigation] Immediately upgrade to the patched firmware versions or disable the SSL-VPN service and restrict access using local-in policies if patching is delayed
Fortinet FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Vulnerability (CVE-2022-40684) Security Advisory
[Affected Scope] FortiOS (7.2.0 to 7.2.1, 7.0.0 to 7.0.6), FortiProxy (7.2.0, 7.0.0 to 7.0.6), FortiSwitchManager (7.2.0, 7.0.0)
[Impact] An unauthenticated remote attacker can bypass authentication via specially crafted HTTP/HTTPS requests, gaining full administrative access to perform arbitrary operations
[Mitigation] Immediately upgrade to patched versions (FortiOS 7.2.2 / 7.0.7 or higher) or disable HTTP/HTTPS administrative access from untrusted networks
Fortinet FortiOS and FortiProxy SSL VPN Path Traversal Vulnerability (CVE-2018-13379) Security Advisory
[Affected Scope] Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7, 5.4.6 to 5.4.12, and specific FortiProxy versions with SSL VPN web portal enabled
[Impact] Unauthenticated remote attackers can download arbitrary system files (including active session credentials) via specially crafted HTTP requests, leading to full network compromise
[Mitigation] Immediately upgrade FortiOS/FortiProxy firmware to the patched versions, terminate active SSL VPN sessions, and enforce a global password reset