Fortinet — known exploited vulnerabilities
The CISA Known Exploited Vulnerabilities catalog (KEV) lists vulnerabilities that CISA has confirmed are being exploited in the wild; U.S. federal civilian agencies are required to remediate each entry by its due date. This page joins the KEV entries for Fortinet with NVD CVSS scores and CISA's ransomware-campaign flag. See our methodology or browse all CVEs.
Key findings
CISA's Known Exploited Vulnerabilities catalog lists 31 Fortinet vulnerabilities confirmed as exploited in the wild across 10 products; 14 of them (45%) are flagged as used in known ransomware campaigns. FortiOS is the most-affected product, with 9 entries (29% of the total). CISA added 8 entries in 2026 so far, compared with 8 in 2025. Across the 31 entries with an NVD CVSS score (100% of the total), the average score is 8.6; 21 entries are rated critical by NVD. The most recent addition is CVE-2026-104286 (Fortinet FortiMail Path Traversal Vulnerability), added on 2026-10-01.
Affected products
| Product | Entries | Share |
|---|---|---|
| FortiOS | 9 | 29% |
| Multiple Products | 6 | 19% |
| FortiOS and FortiProxy | 4 | 13% |
| FortiClient EMS | 3 | 9.7% |
| FortiWeb | 3 | 9.7% |
| FortiSandbox | 2 | 6.5% |
| FortiMail | 1 | 3.2% |
| FortiManager | 1 | 3.2% |
| FortiOS and FortiProxy SSL-VPN | 1 | 3.2% |
| FortiOS and FortiADC | 1 | 3.2% |
Entries added per year
By date added to the KEV catalog
Exploited Fortinet vulnerabilities (31)
Newest first. CVSS scores from NVD where available.
| CVE | Product | Vulnerability | Date added | Ransomware | CVSS |
|---|---|---|---|---|---|
| CVE-2026-104286 | FortiMail | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | — | CRITICAL9.8 |
| CVE-2025-25249 | Multiple Products | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 2026-09-09 | — | HIGH8.1 |
| CVE-2025-68686 | FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-07-27 | — | MEDIUM5.9 |
| CVE-2026-25089 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | — | CRITICAL9.8 |
| CVE-2026-39808 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | — | CRITICAL9.8 |
| CVE-2026-21643 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 2026-04-13 | — | CRITICAL9.8 |
| CVE-2026-35616 | FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-06 | — | CRITICAL9.8 |
| CVE-2026-24858 | Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-27 | — | CRITICAL9.8 |
| CVE-2025-59718 | Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 2025-12-16 | — | CRITICAL9.8 |
| CVE-2025-58034 | FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | 2025-11-18 | — | HIGH7.2 |
| CVE-2025-64446 | FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | 2025-11-14 | — | CRITICAL9.8 |
| CVE-2025-25257 | FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | 2025-07-18 | — | CRITICAL9.8 |
| CVE-2019-6693 | FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 2025-06-25 | Known | MEDIUM6.5 |
| CVE-2025-32756 | Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 2025-05-14 | — | CRITICAL9.8 |
| CVE-2025-24472 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-03-18 | Known | HIGH8.1 |
| CVE-2024-55591 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-01-14 | Known | CRITICAL9.8 |
| CVE-2024-47575 | FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | 2024-10-23 | — | CRITICAL9.8 |
| CVE-2024-23113 | Multiple Products | Fortinet Multiple Products Format String Vulnerability | 2024-10-09 | — | CRITICAL9.8 |
| CVE-2023-48788 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 2024-03-25 | Known | CRITICAL9.8 |
| CVE-2024-21762 | FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | 2024-02-09 | Known | CRITICAL9.8 |
| CVE-2023-27997 | FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 2023-06-13 | Known | CRITICAL9.8 |
| CVE-2022-41328 | FortiOS | Fortinet FortiOS Path Traversal Vulnerability | 2023-03-14 | — | MEDIUM6.7 |
| CVE-2022-42475 | FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 2022-12-13 | Known | CRITICAL9.8 |
| CVE-2022-40684 | Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | 2022-10-11 | Known | CRITICAL9.8 |
| CVE-2018-13374 | FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 2022-09-08 | Known | MEDIUM4.3 |
| CVE-2018-13382 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | 2022-01-10 | Known | CRITICAL9.1 |
| CVE-2018-13383 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | 2022-01-10 | Known | MEDIUM4.3 |
| CVE-2021-44168 | FortiOS | Fortinet FortiOS Arbitrary File Download | 2021-12-10 | — | LOW3.3 |
| CVE-2019-5591 | FortiOS | Fortinet FortiOS Default Configuration Vulnerability | 2021-11-03 | Known | MEDIUM6.5 |
| CVE-2020-12812 | FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 2021-11-03 | Known | CRITICAL9.8 |
| CVE-2018-13379 | FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 2021-11-03 | Known | CRITICAL9.1 |
Source: CISA Known Exploited Vulnerabilities catalog, joined with NIST NVD CVSS data. Vendor names are normalized across spellings. Compare all vendors.