https://patchfirst.co/vendor/fortinet/New and newly exploited Fortinet CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-107656/CVE-2026-107656Mon, 26 Oct 2026 00:00:00 GMTFortinet · FortiSandbox. Not in CISA KEV. EPSS 0.9% (higher than 58.2% of CVEs). CVSS 9.8 CRITICAL. Priority 19.9 of 100.https://patchfirst.co/cve/CVE-2025-61624/CVE-2025-61624#kevFri, 16 Oct 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 1.3% (higher than 71.3% of CVEs). CVSS 6.5 MEDIUM. Priority 66.8 of 100.kevhttps://patchfirst.co/cve/CVE-2026-106173/CVE-2026-106173Tue, 13 Oct 2026 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 1.0% (higher than 62.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 71.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-104286/CVE-2026-104286#kevThu, 01 Oct 2026 00:00:00 GMTFortinet · FortiMail. In CISA KEV since 2026-10-01. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 78.2 of 100.kevpublic-exploitT1190T1565.001https://patchfirst.co/cve/CVE-2025-25249/CVE-2025-25249#kevWed, 09 Sep 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 77.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-68686/CVE-2025-68686#kevMon, 27 Jul 2026 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2026-07-27. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 66.8 of 100.kevT1190T1005https://patchfirst.co/cve/CVE-2026-39808/CVE-2026-39808#kevThu, 16 Jul 2026 00:00:00 GMTFortinet · FortiSandbox. In CISA KEV since 2026-07-16. ENISA EUVD lists it as exploited. EPSS 93.2% (higher than 99.83% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 78.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-25089/CVE-2026-25089#kevThu, 16 Jul 2026 00:00:00 GMTFortinet · FortiSandbox. In CISA KEV since 2026-07-16. ENISA EUVD lists it as exploited. EPSS 76.1% (higher than 99.53% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-39813/CVE-2026-39813Tue, 14 Apr 2026 00:00:00 GMTFortinet · FortiSandbox. Not in CISA KEV. EPSS 22.2% (higher than 97.7% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. Priority 73.3 of 100.public-exploithttps://patchfirst.co/cve/CVE-2026-21643/CVE-2026-21643#kevMon, 13 Apr 2026 00:00:00 GMTFortinet · FortiClient EMS. In CISA KEV since 2026-04-13. ENISA EUVD lists it as exploited. EPSS 97.7% (higher than 99.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-35616/CVE-2026-35616#kevMon, 06 Apr 2026 00:00:00 GMTFortinet · FortiClient EMS. In CISA KEV since 2026-04-06. ENISA EUVD lists it as exploited. EPSS 94.0% (higher than 99.85% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 84.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-25815/CVE-2026-25815Thu, 05 Feb 2026 00:00:00 GMTFortinet · FortiOS. Not in CISA KEV. EPSS 0.1% (higher than 1.4% of CVEs). CVSS 3.2 LOW. Priority 42.5 of 100.https://patchfirst.co/cve/CVE-2026-24858/CVE-2026-24858#kevTue, 27 Jan 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-01-27. ENISA EUVD lists it as exploited. EPSS 86.6% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 74.8 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2025-64155/CVE-2025-64155Tue, 13 Jan 2026 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 43.6% (higher than 98.7% of CVEs). CVSS 9.4 CRITICAL. Public exploit code exists. Priority 72.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-59718/CVE-2025-59718#kevTue, 16 Dec 2025 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2025-12-16. ENISA EUVD lists it as exploited. EPSS 68.3% (higher than 99.33% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 84.7 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2025-59719/CVE-2025-59719Tue, 09 Dec 2025 00:00:00 GMTFortinet · FortiWeb. Not in CISA KEV. ENISA EUVD lists it as exploited. EPSS 29.2% (higher than 98.2% of CVEs). CVSS 9.1 CRITICAL. Priority 69.0 of 100.https://patchfirst.co/cve/CVE-2025-62631/CVE-2025-62631Tue, 09 Dec 2025 00:00:00 GMTFortinet · FortiOS. Not in CISA KEV. EPSS 0.3% (higher than 22.8% of CVEs). CVSS 5.3 MEDIUM. Priority 48.3 of 100.https://patchfirst.co/cve/CVE-2025-58034/CVE-2025-58034#kevTue, 18 Nov 2025 00:00:00 GMTFortinet · FortiWeb. In CISA KEV since 2025-11-18. ENISA EUVD lists it as exploited. EPSS 54.7% (higher than 99.02% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 72.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-64446/CVE-2025-64446#kevFri, 14 Nov 2025 00:00:00 GMTFortinet · FortiWeb. In CISA KEV since 2025-11-14. ENISA EUVD lists it as exploited. EPSS 91.1% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-25252/CVE-2025-25252Tue, 14 Oct 2025 00:00:00 GMTFortinet · FortiOS. Not in CISA KEV. EPSS 0.3% (higher than 27.1% of CVEs). CVSS 4.3 MEDIUM. Priority 53.4 of 100.https://patchfirst.co/cve/CVE-2025-25256/CVE-2025-25256Tue, 12 Aug 2025 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 65.3% (higher than 99.25% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 69.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-52970/CVE-2025-52970Tue, 12 Aug 2025 00:00:00 GMTFortinet · FortiWeb. Not in CISA KEV. EPSS 10.1% (higher than 95.6% of CVEs). CVSS 7.7 HIGH. Public exploit code exists. Priority 65.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2025-25257/CVE-2025-25257#kevFri, 18 Jul 2025 00:00:00 GMTFortinet · FortiWeb. In CISA KEV since 2025-07-18. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1055 Process Injection; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell; T1485 Data Destruction. Priority 69.9 of 100.kevpublic-exploitT1055T1068T1190T1059.004T1485https://patchfirst.co/cve/CVE-2025-24477/CVE-2025-24477Tue, 15 Jul 2025 00:00:00 GMTFortinet · FortiOS. Not in CISA KEV. EPSS 0.2% (higher than 15.3% of CVEs). CVSS 4.0 MEDIUM. Priority 41.5 of 100.https://patchfirst.co/cve/CVE-2019-6693/CVE-2019-6693#kevWed, 25 Jun 2025 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2025-06-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 6.6% (higher than 93.9% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1552 Unsecured Credentials; T1555 Credentials from Password Stores. Priority 76.3 of 100.kevransomwarepublic-exploitT1552T1555https://patchfirst.co/cve/CVE-2025-32756/CVE-2025-32756#kevWed, 14 May 2025 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2025-05-14. ENISA EUVD lists it as exploited. EPSS 30.9% (higher than 98.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1059 Command and Scripting Interpreter; T1003 OS Credential Dumping; T1041 Exfiltration Over C2 Channel; T1046 Network Service Discovery; T1070.004 File Deletion; +1 more. Priority 79.5 of 100.kevpublic-exploitT1133T1059T1003T1041T1046T1070.004T1608.001https://patchfirst.co/cve/CVE-2025-24472/CVE-2025-24472#kevTue, 18 Mar 2025 00:00:00 GMTFortinet · FortiOS and FortiProxy. In CISA KEV since 2025-03-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 7.2% (higher than 94.3% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098.004 SSH Authorized Keys. Priority 77.5 of 100.kevransomwarepublic-exploitT1190T1098.004https://patchfirst.co/cve/CVE-2024-55591/CVE-2024-55591#kevTue, 14 Jan 2025 00:00:00 GMTFortinet · FortiOS and FortiProxy. In CISA KEV since 2025-01-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.3% (higher than 99.85% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1078 Valid Accounts; T1555 Credentials from Password Stores; T1021 Remote Services. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1068T1078T1555T1021https://patchfirst.co/cve/CVE-2024-50570/CVE-2024-50570Wed, 18 Dec 2024 00:00:00 GMTFortinet · FortiClientMac. Not in CISA KEV. EPSS 0.1% (higher than 3.5% of CVEs). CVSS 4.9 MEDIUM. Priority 39.1 of 100.https://patchfirst.co/cve/CVE-2024-47575/CVE-2024-47575#kevWed, 23 Oct 2024 00:00:00 GMTFortinet · FortiManager. In CISA KEV since 2024-10-23. ENISA EUVD lists it as exploited. EPSS 94.8% (higher than 99.86% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-23113/CVE-2024-23113#kevWed, 09 Oct 2024 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2024-10-09. ENISA EUVD lists it as exploited. EPSS 61.7% (higher than 99.17% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2024-21754/CVE-2024-21754Tue, 11 Jun 2024 00:00:00 GMTFortinet · FortiProxy. Not in CISA KEV. EPSS 3.5% (higher than 89.1% of CVEs). CVSS 1.7 LOW. Public exploit code exists. Priority 60.1 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-48788/CVE-2023-48788#kevMon, 25 Mar 2024 00:00:00 GMTFortinet · FortiClient EMS. In CISA KEV since 2024-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.4% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2024-21762/CVE-2024-21762#kevFri, 09 Feb 2024 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2024-02-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 84.6% (higher than 99.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1574https://patchfirst.co/cve/CVE-2024-23108/CVE-2024-23108Mon, 05 Feb 2024 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 80.3% (higher than 99.62% of CVEs). CVSS 9.7 CRITICAL. Public exploit code exists. Priority 78.6 of 100.public-exploithttps://patchfirst.co/cve/CVE-2024-23109/CVE-2024-23109Mon, 05 Feb 2024 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 3.3% (higher than 88.5% of CVEs). CVSS 9.7 CRITICAL. Priority 71.4 of 100.https://patchfirst.co/cve/CVE-2023-34993/CVE-2023-34993Tue, 10 Oct 2023 00:00:00 GMTFortinet · FortiWLM. Not in CISA KEV. EPSS 21.3% (higher than 97.6% of CVEs). CVSS 9.6 CRITICAL. Public exploit code exists. Priority 66.9 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-34992/CVE-2023-34992Tue, 10 Oct 2023 00:00:00 GMTFortinet · FortiSIEM. Not in CISA KEV. EPSS 81.7% (higher than 99.64% of CVEs). CVSS 9.7 CRITICAL. Public exploit code exists. Priority 32.4 of 100.public-exploithttps://patchfirst.co/cve/CVE-2023-27997/CVE-2023-27997#kevTue, 13 Jun 2023 00:00:00 GMTFortinet · FortiOS and FortiProxy SSL-VPN. In CISA KEV since 2023-06-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.72% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1136 Create Account. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1574T1136https://patchfirst.co/cve/CVE-2022-41328/CVE-2022-41328#kevTue, 14 Mar 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2023-03-14. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1574 Hijack Execution Flow; T1037 Boot or Logon Initialization Scripts; T1049 System Network Connections Discovery; T1565.001 Stored Data Manipulation. Named in 1 threat report. Priority 66.0 of 100.kevT1574T1037T1049T1565.001https://patchfirst.co/cve/CVE-2022-39952/CVE-2022-39952Thu, 16 Feb 2023 00:00:00 GMTFortinet · FortiNAC. Not in CISA KEV. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 73.3 of 100.public-exploitT1190T1059https://patchfirst.co/cve/CVE-2022-41335/CVE-2022-41335Thu, 16 Feb 2023 00:00:00 GMTFortinet · FortiSwitchManager. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 8.6 HIGH. Priority 53.1 of 100.https://patchfirst.co/cve/CVE-2022-42475/CVE-2022-42475Mon, 02 Jan 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1071.001 Web Protocols; T1622 Debugger Evasion. Named in 4 threat reports. Priority 88.8 of 100.kevransomwarepublic-exploitT1190T1574T1071.001T1622https://patchfirst.co/cve/CVE-2022-40684/CVE-2022-40684Tue, 18 Oct 2022 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2022-10-11, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098.004 SSH Authorized Keys. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1098.004https://patchfirst.co/cve/CVE-2018-13374/CVE-2018-13374#kevThu, 08 Sep 2022 00:00:00 GMTFortinet · FortiOS and FortiADC. In CISA KEV since 2022-09-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 38.1% (higher than 98.6% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. Priority 75.7 of 100.kevransomwarepublic-exploithttps://patchfirst.co/cve/CVE-2018-13382/CVE-2018-13382#kevMon, 10 Jan 2022 00:00:00 GMTFortinet · FortiOS and FortiProxy. In CISA KEV since 2022-01-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.7% (higher than 99.64% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1098 Account Manipulation. Priority 78.2 of 100.kevransomwarepublic-exploitT1190T1098https://patchfirst.co/cve/CVE-2018-13383/CVE-2018-13383#kevMon, 10 Jan 2022 00:00:00 GMTFortinet · FortiOS and FortiProxy. In CISA KEV since 2022-01-10, known ransomware use. ENISA EUVD lists it as exploited. EPSS 32.5% (higher than 98.3% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1499.004 Application or System Exploitation. Priority 72.2 of 100.kevransomwareT1499.004https://patchfirst.co/cve/CVE-2021-44168/CVE-2021-44168Tue, 04 Jan 2022 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.8% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078.003 Local Accounts; T1601 Modify System Image. Priority 60.4 of 100.kevpublic-exploitT1078.003T1601https://patchfirst.co/cve/CVE-2018-13379/CVE-2018-13379#kevWed, 03 Nov 2021 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 5 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1190https://patchfirst.co/cve/CVE-2020-12812/CVE-2020-12812#kevWed, 03 Nov 2021 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 45.4% (higher than 98.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1556 Modify Authentication Process. Named in 1 threat report. Priority 78.5 of 100.kevransomwareT1556