Fortinet

FortiOS

282 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2025-62675

  • EPSS 0.27%
  • Veröffentlicht 14.07.2026 15:15:12
  • Zuletzt bearbeitet 29.09.2026 15:10:00

An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4...

6.6

CVE-2026-59837

  • EPSS 0.71%
  • Veröffentlicht 14.07.2026 15:06:31
  • Zuletzt bearbeitet 11.08.2026 13:19:00

A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, F...

6.7

CVE-2025-67862

Medienbericht
  • EPSS 0.15%
  • Veröffentlicht 09.06.2026 14:27:50
  • Zuletzt bearbeitet 23.07.2026 08:10:00

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all v...

8.8

CVE-2025-53844

Medienbericht
  • EPSS 0.56%
  • Veröffentlicht 12.05.2026 16:54:10
  • Zuletzt bearbeitet 07.10.2026 09:10:00

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

6.5

CVE-2025-61624

Medienbericht
  • EPSS 0.5%
  • Veröffentlicht 14.04.2026 15:39:51
  • Zuletzt bearbeitet 12.05.2026 13:17:23

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all version...

8.8

CVE-2025-53847

  • EPSS 0.28%
  • Veröffentlicht 14.04.2026 15:38:06
  • Zuletzt bearbeitet 07.10.2026 09:10:00

A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allo...

5.8

CVE-2025-55018

  • EPSS 0.35%
  • Veröffentlicht 10.02.2026 15:39:12
  • Zuletzt bearbeitet 12.05.2026 13:17:22

An inconsistent interpretation of http requests ('http request smuggling') vulnerability in Fortinet FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4.3 through 6.4.16 may allow an unauthenti...

4.2

CVE-2025-62439

  • EPSS 0.14%
  • Veröffentlicht 10.02.2026 15:39:12
  • Zuletzt bearbeitet 12.05.2026 13:17:23

An Improper Verification of Source of a Communication Channel vulnerability [CWE-940] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions may allow an authenticated us...

7.2

CVE-2025-64157

Medienbericht
  • EPSS 1.37%
  • Veröffentlicht 10.02.2026 15:39:12
  • Zuletzt bearbeitet 12.05.2026 13:17:23

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or comm...

5.9

CVE-2025-68686

Warnung Medienbericht
  • EPSS 1.26%
  • Veröffentlicht 10.02.2026 15:39:12
  • Zuletzt bearbeitet 28.07.2026 05:17:04

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may...