{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: Fortinet vulnerabilities","home_page_url":"https://patchfirst.co/vendor/fortinet/","feed_url":"https://patchfirst.co/feed/vendor/fortinet.json","description":"New and newly exploited Fortinet CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-107656","url":"https://patchfirst.co/cve/CVE-2026-107656/","title":"CVE-2026-107656: An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…","content_text":"Fortinet · FortiSandbox. Not in CISA KEV. EPSS 0.9% (higher than 58.2% of CVEs). CVSS 9.8 CRITICAL. Priority 19.9 of 100.","summary":"An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through…","date_published":"2026-10-26T00:00:00.000Z","date_modified":"2026-10-27T04:17:40.000Z","tags":[],"_patchfirst":{"reason":"published","priority":19.9,"kev":null,"epss":{"score":0.00851,"percentile":0.58181},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSandbox","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-61624#kev","url":"https://patchfirst.co/cve/CVE-2025-61624/","title":"[KEV] CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 1.3% (higher than 71.3% of CVEs). CVSS 6.5 MEDIUM. Priority 66.8 of 100.","summary":"Fortinet Multiple Products Path Traversal Vulnerability","date_published":"2026-10-16T00:00:00.000Z","date_modified":"2026-10-17T04:16:43.000Z","tags":["kev"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2026-10-16","ransomware":false},"epss":{"score":0.01343,"percentile":0.71332},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-106173","url":"https://patchfirst.co/cve/CVE-2026-106173/","title":"CVE-2026-106173: A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 1.0% (higher than 62.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 71.6 of 100.","summary":"A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM…","date_published":"2026-10-13T00:00:00.000Z","date_modified":"2026-10-21T04:17:07.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":71.6,"kev":null,"epss":{"score":0.00998,"percentile":0.62705},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-104286#kev","url":"https://patchfirst.co/cve/CVE-2026-104286/","title":"[KEV] CVE-2026-104286: Fortinet FortiMail Path Traversal Vulnerability","content_text":"Fortinet · FortiMail. In CISA KEV since 2026-10-01. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 78.2 of 100.","summary":"Fortinet FortiMail Path Traversal Vulnerability","date_published":"2026-10-01T00:00:00.000Z","date_modified":"2026-10-28T20:09:29.000Z","tags":["kev","public-exploit","T1190","T1565.001"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2026-10-01","ransomware":false},"epss":{"score":0.04573,"percentile":0.91609},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiMail","techniqueIds":["T1190","T1565.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-25249#kev","url":"https://patchfirst.co/cve/CVE-2025-25249/","title":"[KEV] CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 77.8 of 100.","summary":"Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability","date_published":"2026-09-09T00:00:00.000Z","date_modified":"2026-10-07T18:17:13.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":77.8,"kev":{"dateAdded":"2026-09-09","ransomware":false},"epss":{"score":0.03742,"percentile":0.89842},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-68686#kev","url":"https://patchfirst.co/cve/CVE-2025-68686/","title":"[KEV] CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2026-07-27. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 66.8 of 100.","summary":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","date_published":"2026-07-27T00:00:00.000Z","date_modified":"2026-07-28T05:17:04.000Z","tags":["kev","T1190","T1005"],"_patchfirst":{"reason":"kev","priority":66.8,"kev":{"dateAdded":"2026-07-27","ransomware":false},"epss":{"score":0.29499,"percentile":0.98182},"cvss":{"score":5.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190","T1005"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2026-39808#kev","url":"https://patchfirst.co/cve/CVE-2026-39808/","title":"[KEV] CVE-2026-39808: Fortinet FortiSandbox OS Command Injection Vulnerability","content_text":"Fortinet · FortiSandbox. In CISA KEV since 2026-07-16. ENISA EUVD lists it as exploited. EPSS 93.2% (higher than 99.83% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.7 of 100.","summary":"Fortinet FortiSandbox OS Command Injection Vulnerability","date_published":"2026-07-16T00:00:00.000Z","date_modified":"2026-10-26T21:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":78.7,"kev":{"dateAdded":"2026-07-16","ransomware":false},"epss":{"score":0.93189,"percentile":0.99834},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSandbox","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-25089#kev","url":"https://patchfirst.co/cve/CVE-2026-25089/","title":"[KEV] CVE-2026-25089: Fortinet FortiSandbox OS Command Injection Vulnerability","content_text":"Fortinet · FortiSandbox. In CISA KEV since 2026-07-16. ENISA EUVD lists it as exploited. EPSS 76.1% (higher than 99.53% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.","summary":"Fortinet FortiSandbox OS Command Injection Vulnerability","date_published":"2026-07-16T00:00:00.000Z","date_modified":"2026-07-23T08:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-07-16","ransomware":false},"epss":{"score":0.76112,"percentile":0.99532},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSandbox","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-39813","url":"https://patchfirst.co/cve/CVE-2026-39813/","title":"CVE-2026-39813: A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…","content_text":"Fortinet · FortiSandbox. Not in CISA KEV. EPSS 22.2% (higher than 97.7% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 73.3 of 100.","summary":"A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…","date_published":"2026-04-14T00:00:00.000Z","date_modified":"2026-06-18T09:01:15.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":73.3,"kev":null,"epss":{"score":0.22224,"percentile":0.97675},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSandbox","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2026-21643#kev","url":"https://patchfirst.co/cve/CVE-2026-21643/","title":"[KEV] CVE-2026-21643: Fortinet FortiClient EMS SQL Injection Vulnerability","content_text":"Fortinet · FortiClient EMS. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 97.7% (higher than 99.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.","summary":"Fortinet FortiClient EMS SQL Injection Vulnerability","date_published":"2026-04-13T00:00:00.000Z","date_modified":"2026-06-17T10:18:51.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":84.8,"kev":{"dateAdded":"2026-04-13","ransomware":false},"epss":{"score":0.97735,"percentile":0.99904},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiClient EMS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-35616#kev","url":"https://patchfirst.co/cve/CVE-2026-35616/","title":"[KEV] CVE-2026-35616: Fortinet FortiClient EMS Improper Access Control Vulnerability","content_text":"Fortinet · FortiClient EMS. In CISA KEV since 2026-04-06. ENISA EUVD lists it as exploited. EPSS 94.0% (higher than 99.85% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.","summary":"Fortinet FortiClient EMS Improper Access Control Vulnerability","date_published":"2026-04-06T00:00:00.000Z","date_modified":"2026-07-24T21:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":84.8,"kev":{"dateAdded":"2026-04-06","ransomware":false},"epss":{"score":0.93983,"percentile":0.99846},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiClient EMS","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2026-25815","url":"https://patchfirst.co/cve/CVE-2026-25815/","title":"CVE-2026-25815: Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as…","content_text":"Fortinet · FortiOS. Not in CISA KEV. EPSS 0.1% (higher than 1.4% of CVEs). CVSS 3.2 LOW. Priority 42.5 of 100.","summary":"Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device configuration files, as…","date_published":"2026-02-05T00:00:00.000Z","date_modified":"2026-02-09T19:31:50.000Z","tags":[],"_patchfirst":{"reason":"published","priority":42.5,"kev":null,"epss":{"score":0.00113,"percentile":0.01431},"cvss":{"score":3.2,"severity":"LOW","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2026-24858#kev","url":"https://patchfirst.co/cve/CVE-2026-24858/","title":"[KEV] CVE-2026-24858: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2026-01-27. ENISA EUVD lists it as exploited. EPSS 86.6% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 74.8 of 100.","summary":"Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability","date_published":"2026-01-27T00:00:00.000Z","date_modified":"2026-06-17T10:23:43.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":74.8,"kev":{"dateAdded":"2026-01-27","ransomware":false},"epss":{"score":0.86592,"percentile":0.99739},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-64155","url":"https://patchfirst.co/cve/CVE-2025-64155/","title":"CVE-2025-64155: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 43.6% (higher than 98.7% of CVEs). CVSS 9.4 CRITICAL. Public exploit code exists. Priority 72.9 of 100.","summary":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","date_published":"2026-01-13T00:00:00.000Z","date_modified":"2026-02-26T15:04:42.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":72.9,"kev":null,"epss":{"score":0.43599,"percentile":0.98739},"cvss":{"score":9.4,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-59718#kev","url":"https://patchfirst.co/cve/CVE-2025-59718/","title":"[KEV] CVE-2025-59718: Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2025-12-16. ENISA EUVD lists it as exploited. EPSS 68.3% (higher than 99.33% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 84.7 of 100.","summary":"Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability","date_published":"2025-12-16T00:00:00.000Z","date_modified":"2026-06-17T09:46:35.000Z","tags":["kev","public-exploit","T1190","T1078"],"_patchfirst":{"reason":"kev","priority":84.7,"kev":{"dateAdded":"2025-12-16","ransomware":false},"epss":{"score":0.68293,"percentile":0.9933},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1190","T1078"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-59719","url":"https://patchfirst.co/cve/CVE-2025-59719/","title":"CVE-2025-59719: An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…","content_text":"Fortinet · FortiWeb. Not in CISA KEV. ENISA EUVD lists it as exploited. EPSS 29.2% (higher than 98.2% of CVEs). CVSS 9.1 CRITICAL. Priority 69.0 of 100.","summary":"An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…","date_published":"2025-12-09T00:00:00.000Z","date_modified":"2026-10-15T01:09:27.000Z","tags":[],"_patchfirst":{"reason":"published","priority":69,"kev":null,"epss":{"score":0.29224,"percentile":0.9817},"cvss":{"score":9.1,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiWeb","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2025-62631","url":"https://patchfirst.co/cve/CVE-2025-62631/","title":"CVE-2025-62631: An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all…","content_text":"Fortinet · FortiOS. Not in CISA KEV. EPSS 0.3% (higher than 22.8% of CVEs). CVSS 5.3 MEDIUM. Priority 48.3 of 100.","summary":"An insufficient session expiration vulnerability [CWE-613] vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2 all…","date_published":"2025-12-09T00:00:00.000Z","date_modified":"2026-05-12T09:57:29.000Z","tags":[],"_patchfirst":{"reason":"published","priority":48.3,"kev":null,"epss":{"score":0.00301,"percentile":0.2282},"cvss":{"score":5.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-58034#kev","url":"https://patchfirst.co/cve/CVE-2025-58034/","title":"[KEV] CVE-2025-58034: Fortinet FortiWeb OS Command Injection Vulnerability","content_text":"Fortinet · FortiWeb. In CISA KEV since 2025-11-18. ENISA EUVD lists it as exploited. EPSS 54.7% (higher than 99.02% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 72.8 of 100.","summary":"Fortinet FortiWeb OS Command Injection Vulnerability","date_published":"2025-11-18T00:00:00.000Z","date_modified":"2026-10-18T20:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":72.8,"kev":{"dateAdded":"2025-11-18","ransomware":false},"epss":{"score":0.54724,"percentile":0.99019},"cvss":{"score":7.2,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiWeb","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-64446#kev","url":"https://patchfirst.co/cve/CVE-2025-64446/","title":"[KEV] CVE-2025-64446: Fortinet FortiWeb Path Traversal Vulnerability","content_text":"Fortinet · FortiWeb. In CISA KEV since 2025-11-14. ENISA EUVD lists it as exploited. EPSS 91.1% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.","summary":"Fortinet FortiWeb Path Traversal Vulnerability","date_published":"2025-11-14T00:00:00.000Z","date_modified":"2026-10-18T20:10:00.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2025-11-14","ransomware":false},"epss":{"score":0.91078,"percentile":0.99808},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiWeb","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-25252","url":"https://patchfirst.co/cve/CVE-2025-25252/","title":"CVE-2025-25252: An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through…","content_text":"Fortinet · FortiOS. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 4.3 MEDIUM. Priority 53.4 of 100.","summary":"An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL VPN 7.6.0 through 7.6.2, 7.4.0 through…","date_published":"2025-10-14T00:00:00.000Z","date_modified":"2026-09-13T03:55:21.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.4,"kev":null,"epss":{"score":0.00337,"percentile":0.27085},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2025-25256","url":"https://patchfirst.co/cve/CVE-2025-25256/","title":"CVE-2025-25256: An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 65.3% (higher than 99.25% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 69.1 of 100.","summary":"An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78]…","date_published":"2025-08-12T00:00:00.000Z","date_modified":"2026-08-18T21:09:45.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":69.1,"kev":null,"epss":{"score":0.65297,"percentile":0.99254},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-52970","url":"https://patchfirst.co/cve/CVE-2025-52970/","title":"CVE-2025-52970: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions…","content_text":"Fortinet · FortiWeb. Not in CISA KEV. EPSS 10.1% (higher than 95.6% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. Priority 65.6 of 100.","summary":"A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions…","date_published":"2025-08-12T00:00:00.000Z","date_modified":"2026-01-14T13:46:48.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":65.6,"kev":null,"epss":{"score":0.10084,"percentile":0.95627},"cvss":{"score":7.7,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiWeb","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2025-25257#kev","url":"https://patchfirst.co/cve/CVE-2025-25257/","title":"[KEV] CVE-2025-25257: Fortinet FortiWeb SQL Injection Vulnerability","content_text":"Fortinet · FortiWeb. In CISA KEV since 2025-07-18. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell; T1485 Data Destruction. Priority 69.9 of 100.","summary":"Fortinet FortiWeb SQL Injection Vulnerability","date_published":"2025-07-18T00:00:00.000Z","date_modified":"2026-06-17T09:00:34.000Z","tags":["kev","public-exploit","T1055","T1068","T1190","T1059.004","T1485"],"_patchfirst":{"reason":"kev","priority":69.9,"kev":{"dateAdded":"2025-07-18","ransomware":false},"epss":{"score":0.99921,"percentile":0.99968},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiWeb","techniqueIds":["T1055","T1068","T1190","T1059.004","T1485"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24477","url":"https://patchfirst.co/cve/CVE-2025-24477/","title":"CVE-2025-24477: A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7…","content_text":"Fortinet · FortiOS. Not in CISA KEV. EPSS 0.2% (higher than 15.3% of CVEs). CVSS 4.0 MEDIUM. Priority 41.5 of 100.","summary":"A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7…","date_published":"2025-07-15T00:00:00.000Z","date_modified":"2026-02-10T07:25:10.000Z","tags":[],"_patchfirst":{"reason":"published","priority":41.5,"kev":null,"epss":{"score":0.00241,"percentile":0.15304},"cvss":{"score":4,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2019-6693#kev","url":"https://patchfirst.co/cve/CVE-2019-6693/","title":"[KEV] CVE-2019-6693: Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2025-06-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 6.6% (higher than 93.9% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1555 Credentials from Password Stores. Priority 76.3 of 100.","summary":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","date_published":"2025-06-25T00:00:00.000Z","date_modified":"2026-08-04T05:16:27.000Z","tags":["kev","ransomware","public-exploit","T1552","T1555"],"_patchfirst":{"reason":"kev","priority":76.3,"kev":{"dateAdded":"2025-06-25","ransomware":true},"epss":{"score":0.0664,"percentile":0.93861},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1552","T1555"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-32756#kev","url":"https://patchfirst.co/cve/CVE-2025-32756/","title":"[KEV] CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2025-05-14. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1003 OS Credential Dumping; T1041 Exfiltration Over C2 Channel; T1046 Network Service Discovery; T1070.004 File Deletion; +1 more. Priority 79.5 of 100.","summary":"Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability","date_published":"2025-05-14T00:00:00.000Z","date_modified":"2026-06-17T09:12:32.000Z","tags":["kev","public-exploit","T1133","T1059","T1003","T1041","T1046","T1070.004","T1608.001"],"_patchfirst":{"reason":"kev","priority":79.5,"kev":{"dateAdded":"2025-05-14","ransomware":false},"epss":{"score":0.30944,"percentile":0.98257},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1133","T1059","T1003","T1041","T1046","T1070.004","T1608.001"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2025-24472#kev","url":"https://patchfirst.co/cve/CVE-2025-24472/","title":"[KEV] CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","content_text":"Fortinet · FortiOS and FortiProxy. In CISA KEV since 2025-03-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 7.2% (higher than 94.3% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098.004 SSH Authorized Keys. Priority 77.5 of 100.","summary":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","date_published":"2025-03-18T00:00:00.000Z","date_modified":"2026-08-05T05:16:43.000Z","tags":["kev","ransomware","public-exploit","T1190","T1098.004"],"_patchfirst":{"reason":"kev","priority":77.5,"kev":{"dateAdded":"2025-03-18","ransomware":true},"epss":{"score":0.07235,"percentile":0.9432},"cvss":{"score":8.1,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy","techniqueIds":["T1190","T1098.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-55591#kev","url":"https://patchfirst.co/cve/CVE-2024-55591/","title":"[KEV] CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","content_text":"Fortinet · FortiOS and FortiProxy. In CISA KEV since 2025-01-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.3% (higher than 99.85% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts; T1555 Credentials from Password Stores; T1021 Remote Services. Named in 1 threat report. Priority 83.7 of 100.","summary":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","date_published":"2025-01-14T00:00:00.000Z","date_modified":"2026-08-05T05:16:42.000Z","tags":["kev","ransomware","public-exploit","T1068","T1078","T1555","T1021"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2025-01-14","ransomware":true},"epss":{"score":0.9435,"percentile":0.99851},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy","techniqueIds":["T1068","T1078","T1555","T1021"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-50570","url":"https://patchfirst.co/cve/CVE-2024-50570/","title":"CVE-2024-50570: A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0…","content_text":"Fortinet · FortiClientMac. Not in CISA KEV. EPSS 0.1% (higher than 3.5% of CVEs). CVSS 4.9 MEDIUM. Priority 39.1 of 100.","summary":"A Cleartext Storage of Sensitive Information vulnerability [CWE-312] in FortiClientWindows 7.4.0 through 7.4.1, 7.2.0…","date_published":"2024-12-18T00:00:00.000Z","date_modified":"2025-08-27T21:29:14.000Z","tags":[],"_patchfirst":{"reason":"published","priority":39.1,"kev":null,"epss":{"score":0.00142,"percentile":0.03467},"cvss":{"score":4.9,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiClientMac","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2024-47575#kev","url":"https://patchfirst.co/cve/CVE-2024-47575/","title":"[KEV] CVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerability","content_text":"Fortinet · FortiManager. In CISA KEV since 2024-10-23. ENISA EUVD lists it as exploited. EPSS 94.8% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.","summary":"Fortinet FortiManager Missing Authentication Vulnerability","date_published":"2024-10-23T00:00:00.000Z","date_modified":"2026-06-17T07:57:20.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":69.8,"kev":{"dateAdded":"2024-10-23","ransomware":false},"epss":{"score":0.94766,"percentile":0.99858},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiManager","techniqueIds":["T1190","T1059"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23113#kev","url":"https://patchfirst.co/cve/CVE-2024-23113/","title":"[KEV] CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2024-10-09. ENISA EUVD lists it as exploited. EPSS 61.7% (higher than 99.17% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.6 of 100.","summary":"Fortinet Multiple Products Format String Vulnerability","date_published":"2024-10-09T00:00:00.000Z","date_modified":"2026-06-17T07:12:03.000Z","tags":["kev","public-exploit","T1190","T1059"],"_patchfirst":{"reason":"kev","priority":73.6,"kev":{"dateAdded":"2024-10-09","ransomware":false},"epss":{"score":0.61725,"percentile":0.9917},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-21754","url":"https://patchfirst.co/cve/CVE-2024-21754/","title":"CVE-2024-21754: A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3…","content_text":"Fortinet · FortiProxy. Not in CISA KEV. EPSS 3.5% (higher than 89.1% of CVEs). CVSS 1.7 LOW. Public exploit code exists. Priority 60.1 of 100.","summary":"A use of password hash with insufficient computational effort vulnerability [CWE-916] affecting FortiOS version 7.4.3…","date_published":"2024-06-11T00:00:00.000Z","date_modified":"2025-08-27T20:42:53.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":60.1,"kev":null,"epss":{"score":0.03469,"percentile":0.89056},"cvss":{"score":1.7,"severity":"LOW","version":"3.1"},"vendor":"Fortinet","product":"FortiProxy","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-48788#kev","url":"https://patchfirst.co/cve/CVE-2023-48788/","title":"[KEV] CVE-2023-48788: Fortinet FortiClient EMS SQL Injection Vulnerability","content_text":"Fortinet · FortiClient EMS. In CISA KEV since 2024-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.4% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Named in 1 threat report. Priority 83.7 of 100.","summary":"Fortinet FortiClient EMS SQL Injection Vulnerability","date_published":"2024-03-25T00:00:00.000Z","date_modified":"2026-06-17T06:34:58.000Z","tags":["kev","ransomware","public-exploit","T1190","T1059","T1105"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2024-03-25","ransomware":true},"epss":{"score":0.98446,"percentile":0.99919},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiClient EMS","techniqueIds":["T1190","T1059","T1105"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-21762#kev","url":"https://patchfirst.co/cve/CVE-2024-21762/","title":"[KEV] CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2024-02-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 79.8 of 100.","summary":"Fortinet FortiOS Out-of-Bound Write Vulnerability","date_published":"2024-02-09T00:00:00.000Z","date_modified":"2026-10-22T19:20:41.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574"],"_patchfirst":{"reason":"kev","priority":79.8,"kev":{"dateAdded":"2024-02-09","ransomware":true},"epss":{"score":0.84589,"percentile":0.99703},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190","T1574"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2024-23108","url":"https://patchfirst.co/cve/CVE-2024-23108/","title":"CVE-2024-23108: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 80.3% (higher than 99.62% of CVEs). CVSS 9.7 CRITICAL. Public exploit code exists. Priority 78.6 of 100.","summary":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","date_published":"2024-02-05T00:00:00.000Z","date_modified":"2026-05-19T16:31:19.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":78.6,"kev":null,"epss":{"score":0.80304,"percentile":0.9962},"cvss":{"score":9.7,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2024-23109","url":"https://patchfirst.co/cve/CVE-2024-23109/","title":"CVE-2024-23109: An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 3.3% (higher than 88.5% of CVEs). CVSS 9.7 CRITICAL. Priority 71.4 of 100.","summary":"An improper neutralization of special elements used in an os command ('os command injection') vulnerability in…","date_published":"2024-02-05T00:00:00.000Z","date_modified":"2026-01-14T13:47:28.000Z","tags":[],"_patchfirst":{"reason":"published","priority":71.4,"kev":null,"epss":{"score":0.03293,"percentile":0.88482},"cvss":{"score":9.7,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2023-34993","url":"https://patchfirst.co/cve/CVE-2023-34993/","title":"CVE-2023-34993: A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…","content_text":"Fortinet · FortiWLM. Not in CISA KEV. EPSS 21.3% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. Priority 66.9 of 100.","summary":"A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM…","date_published":"2023-10-10T00:00:00.000Z","date_modified":"2024-09-19T19:24:33.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":66.9,"kev":null,"epss":{"score":0.21321,"percentile":0.97597},"cvss":{"score":9.6,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiWLM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-34992","url":"https://patchfirst.co/cve/CVE-2023-34992/","title":"CVE-2023-34992: A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…","content_text":"Fortinet · FortiSIEM. Not in CISA KEV. EPSS 81.7% (higher than 99.64% of CVEs). CVSS 9.7 CRITICAL. Public exploit code exists. Priority 32.4 of 100.","summary":"A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet…","date_published":"2023-10-10T00:00:00.000Z","date_modified":"2026-01-14T13:47:28.000Z","tags":["public-exploit"],"_patchfirst":{"reason":"published","priority":32.4,"kev":null,"epss":{"score":0.81698,"percentile":0.99643},"cvss":{"score":9.7,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiSIEM","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2023-27997#kev","url":"https://patchfirst.co/cve/CVE-2023-27997/","title":"[KEV] CVE-2023-27997: Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","content_text":"Fortinet · FortiOS and FortiProxy SSL-VPN. In CISA KEV since 2023-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.72% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1136 Create Account. Named in 1 threat report. Priority 83.7 of 100.","summary":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","date_published":"2023-06-13T00:00:00.000Z","date_modified":"2026-07-31T04:16:43.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574","T1136"],"_patchfirst":{"reason":"kev","priority":83.7,"kev":{"dateAdded":"2023-06-13","ransomware":true},"epss":{"score":0.85689,"percentile":0.99725},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy SSL-VPN","techniqueIds":["T1190","T1574","T1136"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-41328#kev","url":"https://patchfirst.co/cve/CVE-2022-41328/","title":"[KEV] CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2023-03-14. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1574 Hijack Execution Flow; T1037 Boot or Logon Initialization Scripts; T1049 System Network Connections Discovery; T1565.001 Stored Data Manipulation. Named in 1 threat report. Priority 66.0 of 100.","summary":"Fortinet FortiOS Path Traversal Vulnerability","date_published":"2023-03-14T00:00:00.000Z","date_modified":"2026-06-17T05:03:02.000Z","tags":["kev","T1574","T1037","T1049","T1565.001"],"_patchfirst":{"reason":"kev","priority":66,"kev":{"dateAdded":"2023-03-14","ransomware":false},"epss":{"score":0.10682,"percentile":0.95802},"cvss":{"score":7.1,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1574","T1037","T1049","T1565.001"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2022-39952","url":"https://patchfirst.co/cve/CVE-2022-39952/","title":"CVE-2022-39952: A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7…","content_text":"Fortinet · FortiNAC. Not in CISA KEV. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.3 of 100.","summary":"A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7…","date_published":"2023-02-16T00:00:00.000Z","date_modified":"2024-10-23T14:32:41.000Z","tags":["public-exploit","T1190","T1059"],"_patchfirst":{"reason":"published","priority":73.3,"kev":null,"epss":{"score":0.99794,"percentile":0.99957},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiNAC","techniqueIds":["T1190","T1059"],"reportCount":1,"hasPublicExploit":true,"euvdExploited":false}},{"id":"CVE-2022-41335","url":"https://patchfirst.co/cve/CVE-2022-41335/","title":"CVE-2022-41335: A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…","content_text":"Fortinet · FortiSwitchManager. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 8.6 HIGH. Priority 53.1 of 100.","summary":"A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8…","date_published":"2023-02-16T00:00:00.000Z","date_modified":"2024-10-23T14:50:43.000Z","tags":[],"_patchfirst":{"reason":"published","priority":53.1,"kev":null,"epss":{"score":0.00927,"percentile":0.6046},"cvss":{"score":8.6,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiSwitchManager","techniqueIds":[],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}},{"id":"CVE-2022-42475","url":"https://patchfirst.co/cve/CVE-2022-42475/","title":"CVE-2022-42475: Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1071.001 Web Protocols; T1622 Debugger Evasion. Named in 4 threat reports. Priority 88.8 of 100.","summary":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","date_published":"2023-01-02T00:00:00.000Z","date_modified":"2026-06-17T05:04:59.000Z","tags":["kev","ransomware","public-exploit","T1190","T1574","T1071.001","T1622"],"_patchfirst":{"reason":"published","priority":88.8,"kev":{"dateAdded":"2022-12-13","ransomware":true},"epss":{"score":0.99474,"percentile":0.99943},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190","T1574","T1071.001","T1622"],"reportCount":4,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2022-40684","url":"https://patchfirst.co/cve/CVE-2022-40684/","title":"CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability","content_text":"Fortinet · Multiple Products. In CISA KEV since 2022-10-11, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098.004 SSH Authorized Keys. Priority 79.9 of 100.","summary":"Fortinet Multiple Products Authentication Bypass Vulnerability","date_published":"2022-10-18T00:00:00.000Z","date_modified":"2026-08-06T05:16:37.000Z","tags":["kev","ransomware","public-exploit","T1190","T1098.004"],"_patchfirst":{"reason":"published","priority":79.9,"kev":{"dateAdded":"2022-10-11","ransomware":true},"epss":{"score":0.99984,"percentile":0.99983},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"Multiple Products","techniqueIds":["T1190","T1098.004"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-13374#kev","url":"https://patchfirst.co/cve/CVE-2018-13374/","title":"[KEV] CVE-2018-13374: Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","content_text":"Fortinet · FortiOS and FortiADC. In CISA KEV since 2022-09-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 38.1% (higher than 98.6% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. Priority 75.7 of 100.","summary":"Fortinet FortiOS and FortiADC Improper Access Control Vulnerability","date_published":"2022-09-08T00:00:00.000Z","date_modified":"2026-10-01T19:17:13.000Z","tags":["kev","ransomware","public-exploit"],"_patchfirst":{"reason":"kev","priority":75.7,"kev":{"dateAdded":"2022-09-08","ransomware":true},"epss":{"score":0.38088,"percentile":0.98555},"cvss":{"score":4.3,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiADC","techniqueIds":[],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-13382#kev","url":"https://patchfirst.co/cve/CVE-2018-13382/","title":"[KEV] CVE-2018-13382: Fortinet FortiOS and FortiProxy Improper Authorization","content_text":"Fortinet · FortiOS and FortiProxy. In CISA KEV since 2022-01-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.7% (higher than 99.64% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098 Account Manipulation. Priority 78.2 of 100.","summary":"Fortinet FortiOS and FortiProxy Improper Authorization","date_published":"2022-01-10T00:00:00.000Z","date_modified":"2026-06-17T01:39:18.000Z","tags":["kev","ransomware","public-exploit","T1190","T1098"],"_patchfirst":{"reason":"kev","priority":78.2,"kev":{"dateAdded":"2022-01-10","ransomware":true},"epss":{"score":0.81691,"percentile":0.99643},"cvss":{"score":7.5,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy","techniqueIds":["T1190","T1098"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-13383#kev","url":"https://patchfirst.co/cve/CVE-2018-13383/","title":"[KEV] CVE-2018-13383: Fortinet FortiOS and FortiProxy Out-of-bounds Write","content_text":"Fortinet · FortiOS and FortiProxy. In CISA KEV since 2022-01-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 32.5% (higher than 98.3% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation. Priority 72.2 of 100.","summary":"Fortinet FortiOS and FortiProxy Out-of-bounds Write","date_published":"2022-01-10T00:00:00.000Z","date_modified":"2026-06-17T01:39:18.000Z","tags":["kev","ransomware","T1499.004"],"_patchfirst":{"reason":"kev","priority":72.2,"kev":{"dateAdded":"2022-01-10","ransomware":true},"epss":{"score":0.32473,"percentile":0.98334},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Fortinet","product":"FortiOS and FortiProxy","techniqueIds":["T1499.004"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2021-44168","url":"https://patchfirst.co/cve/CVE-2021-44168/","title":"CVE-2021-44168: Fortinet FortiOS Arbitrary File Download","content_text":"Fortinet · FortiOS. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078.003 Local Accounts; T1601 Modify System Image. Priority 60.4 of 100.","summary":"Fortinet FortiOS Arbitrary File Download","date_published":"2022-01-04T00:00:00.000Z","date_modified":"2026-06-17T04:11:59.000Z","tags":["kev","public-exploit","T1078.003","T1601"],"_patchfirst":{"reason":"published","priority":60.4,"kev":{"dateAdded":"2021-12-10","ransomware":false},"epss":{"score":0.00906,"percentile":0.59814},"cvss":{"score":7.8,"severity":"HIGH","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1078.003","T1601"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2018-13379#kev","url":"https://patchfirst.co/cve/CVE-2018-13379/","title":"[KEV] CVE-2018-13379: Fortinet FortiOS SSL VPN Path Traversal Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 5 threat reports. Priority 89.9 of 100.","summary":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T01:39:18.000Z","tags":["kev","ransomware","public-exploit","T1190"],"_patchfirst":{"reason":"kev","priority":89.9,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.99999,"percentile":0.99994},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1190"],"reportCount":5,"hasPublicExploit":true,"euvdExploited":true}},{"id":"CVE-2020-12812#kev","url":"https://patchfirst.co/cve/CVE-2020-12812/","title":"[KEV] CVE-2020-12812: Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 45.4% (higher than 98.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1556 Modify Authentication Process. Named in 1 threat report. Priority 78.5 of 100.","summary":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-10-02T14:54:53.000Z","tags":["kev","ransomware","T1556"],"_patchfirst":{"reason":"kev","priority":78.5,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.45379,"percentile":0.98788},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1556"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}}]}