{"meta":{"title":"KEV entries: Fortinet","description":"All KEV entries for vendor Fortinet.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":30,"vendor":"Fortinet","entries":30,"shareOfCatalogPercent":1.7,"ransomwareKnown":14,"firstDateAdded":"2021-11-03","latestDateAdded":"2026-09-09","rank":10},"data":[{"cveID":"CVE-2025-25249","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","dateAdded":"2026-09-09","dueDate":"2026-09-12","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-122","CWE-787"],"shortDescription":"Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-084 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-25249","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2025-25249/"},{"cveID":"CVE-2025-68686","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","dateAdded":"2026-07-27","dueDate":"2026-08-10","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-200"],"shortDescription":"Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2025-68686/"},{"cveID":"CVE-2026-39808","vendorProject":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-100 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-39808","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-39808/"},{"cveID":"CVE-2026-25089","vendorProject":"Fortinet","product":"FortiSandbox","vulnerabilityName":"Fortinet FortiSandbox OS Command Injection Vulnerability","dateAdded":"2026-07-16","dueDate":"2026-07-19","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests.","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-26-141 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2026-25089","telemetryUrl":"https://glide-telemetry.pages.dev/kev/cve-2026-25089/"},{"cveID":"CVE-2026-21643","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2026-04-13","dueDate":"2026-04-16","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-89"],"shortDescription":"Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-1142 ; https://nvd.nist.gov/vuln/detail/CVE-2026-21643","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-21643"},{"cveID":"CVE-2026-35616","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS Improper Access Control Vulnerability","dateAdded":"2026-04-06","dueDate":"2026-04-09","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-284"],"shortDescription":"Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Fortinet's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Fortinet products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://fortiguard.fortinet.com/psirt/FG-IR-26-099 ; https://nvd.nist.gov/vuln/detail/CVE-2026-35616","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-35616"},{"cveID":"CVE-2026-24858","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","dateAdded":"2026-01-27","dueDate":"2026-01-30","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-288"],"shortDescription":"Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"Please adhere to Fortinet's guidelines to assess exposure and mitigate risks. Check for signs of potential compromise on all internet accessible Fortinet products affected by this vulnerability. Apply any final mitigations provided by the vendor as soon as they become available. For more information please see: https://fortiguard.fortinet.com/psirt/FG-IR-26-060 ; https://www.fortinet.com/blog/psirt-blogs/analysis-of-sso-abuse-on-fortios ; https://nvd.nist.gov/vuln/detail/CVE-2026-24858","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2026/#cve-2026-24858"},{"cveID":"CVE-2025-59718","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","dateAdded":"2025-12-16","dueDate":"2025-12-23","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-347"],"shortDescription":"Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-647 ; https://docs.fortinet.com/upgrade-tool/fortigate ; https://nvd.nist.gov/vuln/detail/CVE-2025-59718","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-59718"},{"cveID":"CVE-2025-58034","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb OS Command Injection Vulnerability","dateAdded":"2025-11-18","dueDate":"2025-11-25","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-78"],"shortDescription":"Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-513 ; https://nvd.nist.gov/vuln/detail/CVE-2025-58034","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-58034"},{"cveID":"CVE-2025-64446","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb Path Traversal Vulnerability","dateAdded":"2025-11-14","dueDate":"2025-11-21","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-23"],"shortDescription":"Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-25-910 ; https://nvd.nist.gov/vuln/detail/CVE-2025-64446","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-64446"},{"cveID":"CVE-2025-25257","vendorProject":"Fortinet","product":"FortiWeb","vulnerabilityName":"Fortinet FortiWeb SQL Injection Vulnerability","dateAdded":"2025-07-18","dueDate":"2025-08-08","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-89"],"shortDescription":"Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-151 ; https://nvd.nist.gov/vuln/detail/CVE-2025-25257","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-25257"},{"cveID":"CVE-2019-6693","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","dateAdded":"2025-06-25","dueDate":"2025-07-16","knownRansomwareCampaignUse":"Known","cwes":["CWE-798"],"shortDescription":"Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. ","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.com/advisory/FG-IR-19-007 ; https://nvd.nist.gov/vuln/detail/CVE-2019-6693","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2019-6693"},{"cveID":"CVE-2025-32756","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","dateAdded":"2025-05-14","dueDate":"2025-06-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-124"],"shortDescription":"Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-254 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32756","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-32756"},{"cveID":"CVE-2025-24472","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-03-18","dueDate":"2025-04-08","knownRansomwareCampaignUse":"Known","cwes":["CWE-288"],"shortDescription":" Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24472","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2025-24472"},{"cveID":"CVE-2024-55591","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","dateAdded":"2025-01-14","dueDate":"2025-01-21","knownRansomwareCampaignUse":"Known","cwes":["CWE-288"],"shortDescription":"Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2024-55591","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2025/#cve-2024-55591"},{"cveID":"CVE-2024-47575","vendorProject":"Fortinet","product":"FortiManager","vulnerabilityName":"Fortinet FortiManager Missing Authentication Vulnerability","dateAdded":"2024-10-23","dueDate":"2024-11-13","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-306"],"shortDescription":"Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-423 ; https://nvd.nist.gov/vuln/detail/CVE-2024-47575","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-47575"},{"cveID":"CVE-2024-23113","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Format String Vulnerability","dateAdded":"2024-10-09","dueDate":"2024-10-30","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-134"],"shortDescription":"Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-24-029 ; https://nvd.nist.gov/vuln/detail/CVE-2024-23113","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-23113"},{"cveID":"CVE-2023-48788","vendorProject":"Fortinet","product":"FortiClient EMS","vulnerabilityName":"Fortinet FortiClient EMS SQL Injection Vulnerability","dateAdded":"2024-03-25","dueDate":"2024-04-15","knownRansomwareCampaignUse":"Known","cwes":["CWE-89"],"shortDescription":"Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://www.fortiguard.com/psirt/FG-IR-24-007;  https://nvd.nist.gov/vuln/detail/CVE-2023-48788","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2023-48788"},{"cveID":"CVE-2024-21762","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Out-of-Bound Write Vulnerability","dateAdded":"2024-02-09","dueDate":"2024-02-16","knownRansomwareCampaignUse":"Known","cwes":["CWE-787"],"shortDescription":"Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-21762","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2024/#cve-2024-21762"},{"cveID":"CVE-2023-27997","vendorProject":"Fortinet","product":"FortiOS and FortiProxy SSL-VPN","vulnerabilityName":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","dateAdded":"2023-06-13","dueDate":"2023-07-04","knownRansomwareCampaignUse":"Known","cwes":["CWE-122"],"shortDescription":"Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-23-097;  https://nvd.nist.gov/vuln/detail/CVE-2023-27997","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2023-27997"},{"cveID":"CVE-2022-41328","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Path Traversal Vulnerability","dateAdded":"2023-03-14","dueDate":"2023-04-04","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-22"],"shortDescription":"Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-369;  https://nvd.nist.gov/vuln/detail/CVE-2022-41328","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2023/#cve-2022-41328"},{"cveID":"CVE-2022-42475","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","dateAdded":"2022-12-13","dueDate":"2023-01-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-197"],"shortDescription":"Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-398;  https://nvd.nist.gov/vuln/detail/CVE-2022-42475","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-42475"},{"cveID":"CVE-2022-40684","vendorProject":"Fortinet","product":"Multiple Products","vulnerabilityName":"Fortinet Multiple Products Authentication Bypass Vulnerability","dateAdded":"2022-10-11","dueDate":"2022-11-01","knownRansomwareCampaignUse":"Known","cwes":["CWE-288"],"shortDescription":"Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-22-377;  https://nvd.nist.gov/vuln/detail/CVE-2022-40684","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2022-40684"},{"cveID":"CVE-2018-13374","vendorProject":"Fortinet","product":"FortiOS and FortiADC","vulnerabilityName":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","dateAdded":"2022-09-08","dueDate":"2022-09-29","knownRansomwareCampaignUse":"Known","cwes":["CWE-732"],"shortDescription":"Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.","requiredAction":"Apply updates per vendor instructions.","notes":"https://www.fortiguard.com/psirt/FG-IR-18-157; https://nvd.nist.gov/vuln/detail/CVE-2018-13374","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-13374"},{"cveID":"CVE-2018-13383","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomwareCampaignUse":"Known","cwes":["CWE-787"],"shortDescription":"A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13383","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-13383"},{"cveID":"CVE-2018-13382","vendorProject":"Fortinet","product":"FortiOS and FortiProxy","vulnerabilityName":"Fortinet FortiOS and FortiProxy Improper Authorization","dateAdded":"2022-01-10","dueDate":"2022-07-10","knownRansomwareCampaignUse":"Known","cwes":["CWE-285"],"shortDescription":"An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13382","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2022/#cve-2018-13382"},{"cveID":"CVE-2021-44168","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Arbitrary File Download","dateAdded":"2021-12-10","dueDate":"2021-12-24","knownRansomwareCampaignUse":"Unknown","cwes":["CWE-494"],"shortDescription":"Fortinet FortiOS \"execute restore src-vis\" downloads code without integrity checking, allowing an attacker to arbitrarily download files.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44168","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2021-44168"},{"cveID":"CVE-2020-12812","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-178","CWE-287"],"shortDescription":"Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-12812","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2020-12812"},{"cveID":"CVE-2019-5591","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS Default Configuration Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-306"],"shortDescription":"Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5591","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2019-5591"},{"cveID":"CVE-2018-13379","vendorProject":"Fortinet","product":"FortiOS","vulnerabilityName":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","dateAdded":"2021-11-03","dueDate":"2022-05-03","knownRansomwareCampaignUse":"Known","cwes":["CWE-22"],"shortDescription":"Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.","requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13379","telemetryUrl":"https://glide-telemetry.pages.dev/kev/2021/#cve-2018-13379"}]}