Vendor dossier / #10
Fortinet vulnerabilities in CISA KEV
Answer CISA's KEV catalog lists 30 Fortinet vulnerabilities as of catalog 2026.09.23, 1.7% of all 1,721 entries and rank 10 of 283 vendors. The first was added on 2021-11-03 and the most recent on 2026-09-09; 14 are flagged as used in ransomware campaigns.
- KEV entries
- 301.7% of catalog
- Last 90 days
- +4added
- Ransomware: known
- 1446.7%
- Products
- 9distinct
- First added
- 2021-11-03
- Latest added
- 2026-09-09
- Median days to due
- 21
- Open deadlines
- 0federal
TAdditions per quarter
Table view (by year)
| Year | Added |
|---|---|
| 2021 | 4 |
| 2022 | 5 |
| 2023 | 2 |
| 2024 | 4 |
| 2025 | 8 |
| 2026 | 7 |
QCommon questions
How many Fortinet vulnerabilities are in CISA KEV?
30, as of KEV catalog 2026.09.23 (released 2026-09-23). That is 1.7% of the catalog.
Which Fortinet product has the most KEV entries?
FortiOS, with 9 entries. 9 products appear in total.
How many Fortinet KEV vulnerabilities are linked to ransomware?
14 of 30 (46.7%) are flagged by CISA as known to be used in ransomware campaigns.
When was the latest Fortinet vulnerability added to KEV?
2026-09-09 (CVE-2025-25249).
What is the most common weakness in Fortinet KEV entries?
CWE-288 (Authentication bypass via alternate path), listed on 4 entries.
PProducts
| Product | Entries | Share of vendor |
|---|---|---|
| FortiOS | 9 | 30% |
| Multiple Products | 6 | 20% |
| FortiOS and FortiProxy | 4 | 13.3% |
| FortiClient EMS | 3 | 10% |
| FortiWeb | 3 | 10% |
| FortiSandbox | 2 | 6.7% |
| FortiManager | 1 | 3.3% |
| FortiOS and FortiProxy SSL-VPN | 1 | 3.3% |
| FortiOS and FortiADC | 1 | 3.3% |
WWeaknesses
| CWE | Entries | Share of vendor |
|---|---|---|
| CWE-288 Authentication bypass via alternate path | 4 | 13.3% |
| CWE-787 Out-of-bounds write | 3 | 10% |
| CWE-78 OS command injection | 3 | 10% |
| CWE-89 SQL injection | 3 | 10% |
| CWE-122 Heap-based buffer overflow | 2 | 6.7% |
| CWE-306 Missing authentication | 2 | 6.7% |
| CWE-22 Path traversal | 2 | 6.7% |
| CWE-200 Information exposure | 1 | 3.3% |
| CWE-284 Improper access control | 1 | 3.3% |
| CWE-347 | 1 | 3.3% |
| CWE-23 Relative path traversal | 1 | 3.3% |
| CWE-798 Hard-coded credentials | 1 | 3.3% |
EAll 30 entries
| CVE | Product | Vulnerability | Added | Due | Ransomware | CWE |
|---|---|---|---|---|---|---|
| CVE-2025-25249 | Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | Unknown | CWE-122, CWE-787 | ||
| CVE-2025-68686 | FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | Unknown | CWE-200 | ||
| CVE-2026-39808 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2026-25089 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2026-21643 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2026-35616 | FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | Unknown | CWE-284 | ||
| CVE-2026-24858 | Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | Unknown | CWE-288 | ||
| CVE-2025-59718 | Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | Unknown | CWE-347 | ||
| CVE-2025-58034 | FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | Unknown | CWE-78 | ||
| CVE-2025-64446 | FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | Unknown | CWE-23 | ||
| CVE-2025-25257 | FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | Unknown | CWE-89 | ||
| CVE-2019-6693 | FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | Known | CWE-798 | ||
| CVE-2025-32756 | Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | Unknown | CWE-124 | ||
| CVE-2025-24472 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Known | CWE-288 | ||
| CVE-2024-55591 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | Known | CWE-288 | ||
| CVE-2024-47575 | FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | Unknown | CWE-306 | ||
| CVE-2024-23113 | Multiple Products | Fortinet Multiple Products Format String Vulnerability | Unknown | CWE-134 | ||
| CVE-2023-48788 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | Known | CWE-89 | ||
| CVE-2024-21762 | FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | Known | CWE-787 | ||
| CVE-2023-27997 | FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | Known | CWE-122 | ||
| CVE-2022-41328 | FortiOS | Fortinet FortiOS Path Traversal Vulnerability | Unknown | CWE-22 | ||
| CVE-2022-42475 | FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | Known | CWE-197 | ||
| CVE-2022-40684 | Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | Known | CWE-288 | ||
| CVE-2018-13374 | FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | Known | CWE-732 | ||
| CVE-2018-13383 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | Known | CWE-787 | ||
| CVE-2018-13382 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | Known | CWE-285 | ||
| CVE-2021-44168 | FortiOS | Fortinet FortiOS Arbitrary File Download | Unknown | CWE-494 | ||
| CVE-2020-12812 | FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | Known | CWE-178, CWE-287 | ||
| CVE-2019-5591 | FortiOS | Fortinet FortiOS Default Configuration Vulnerability | Known | CWE-306 | ||
| CVE-2018-13379 | FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | Known | CWE-22 |
Cite this
CISA's Known Exploited Vulnerabilities catalog lists 30 Fortinet vulnerabilities (1.7% of all entries). Source: Telemetry analysis of the CISA Known Exploited Vulnerabilities catalog, version 2026.09.23 (released 2026-09-23). https://glide-telemetry.pages.dev/vendors/fortinet/
Source: CISA KEV catalog v2026.09.23, released 2026-09-23. Windows end 2026-09-23. Vendor names are CISA's vendorProject strings; Telemetry states no facts about Fortinet beyond this data.