Fortinet

Operational audit scripts and mitigation intelligence for 111 known Fortinet vulnerabilities.

CVSS 10

CVE-2024-23109

Target: FortiGate - API
CVSS 10

CVE-2024-23108

Target: FortiGate - API
CVSS 10

CVE-2023-34992

Target: FortiGate - API
CVSS 9.9

CVE-2023-40714

Target: FortiSIEM - GUI
CVSS 9.8

CVE-2023-34990

Target: FortiWLM - Web Interface
CVSS 9.8

CVE-2023-48788

Actively Exploited

Target: FortiClientEMS - FortiClientEMS
CVSS 9.8

CVE-2026-21643

Target: FortiClientEMS - Web Server
CVSS 9.8

CVE-2026-35616

Target: FortiClientEMS - FortiClient
CVSS 9.8

CVE-2023-42789

Target: FortiOS - Firewall
CVSS 9.8

CVE-2023-36553

Target: FortiSIEM - API
CVSS 9.8

CVE-2023-34991

Target: FortiWLM - Web Interface
CVSS 9.8

CVE-2023-36550

Target: FortiWLM - Web Management Interface
CVSS 9.8

CVE-2026-24858

Actively Exploited

Target: FortiOS - Authentication Module
CVSS 9.8

CVE-2023-36548

Target: FortiWLM - Web Management Interface
CVSS 9.8

CVE-2023-36547

Target: FortiWLM - Web Management Interface
CVSS 9.8

CVE-2025-32756

Actively Exploited

Target: FortiCamera - Firmware
CVSS 9.8

CVE-2025-22252

Target: FortiProxy - Web UI
CVSS 9.8

CVE-2025-25257

Actively Exploited

Target: FortiWeb - Web Application Firewall
CVSS 9.8

CVE-2025-25256

Target: FortiSIEM - CLI
CVSS 9.8

CVE-2023-34993

Target: FortiWLM - Web Management Interface
CVSS 9.8

CVE-2023-33308

Target: FortiOS - Firewall
CVSS 9.8

CVE-2023-33299

Target: FortiNAC - Inter-Server Communication
CVSS 9.8

CVE-2024-48887

Target: FortiSwitch - GUI
CVSS 9.8

CVE-2025-64446

Actively Exploited

Target: FortiWeb - Web Server
CVSS 9.8

CVE-2025-59719

Target: FortiWeb - Web UI
CVSS 9.8

CVE-2025-64155

Target: FortiSIEM - OS Command Interface
CVSS 9.8

CVE-2025-47855

Target: FortiFone - Firmware
CVSS 9.8

CVE-2023-37936

Target: FortiSwitch - Firmware
CVSS 9.8

CVE-2024-23113

Actively Exploited

Target: FortiOS - FortiGate
CVSS 9.8

CVE-2024-21762

Actively Exploited

Target: FortiOS - Firewall
CVSS 9.8

CVE-2025-59718

Actively Exploited

Target: FortiOS - FortiCloud SSO
CVSS 9.8

CVE-2023-25610

Target: FortiOS - Administrative Interface
CVSS 9.8

CVE-2024-47575

Actively Exploited

Target: FortiManager - Management Plane
CVSS 9.6

CVE-2023-45590

Target: FortiClient - Linux
CVSS 9.6

CVE-2023-47534

Target: FortiClientEMS - CSV Parser
CVSS 9

CVE-2024-48886

Target: FortiOS - Authentication Module
CVSS 9

CVE-2024-47572

Target: FortiSOAR - CSV Import
CVSS 8.8

CVE-2024-27778

Target: FortiSandbox - Web UI
CVSS 8.8

CVE-2026-22627

Target: FortiSwitchAX - Firmware
CVSS 8.8

CVE-2025-58692

Target: FortiVoice - Web UI
CVSS 8.8

CVE-2025-60024

Target: FortiVoice - Web UI
CVSS 8.8

CVE-2025-52436

Target: FortiSandbox - Web UI
CVSS 8.8

CVE-2024-21755

Target: FortiSandbox - OS Command Interface
CVSS 8.8

CVE-2024-21756

Target: FortiSandbox - OS Command Interface
CVSS 8.8

CVE-2024-31491

Target: FortiSandbox - Sandbox Engine
CVSS 8.8

CVE-2024-23668

Target: FortiWebManager - Web Interface
CVSS 8.8

CVE-2024-23663

Target: FortiExtender - Web UI
CVSS 8.8

CVE-2024-27784

Target: FortiAIOps - API Endpoint
CVSS 8.8

CVE-2024-40591

Target: FortiOS - Security Fabric
CVSS 8.8

CVE-2024-52961

Target: FortiSandbox - OS Command
CVSS 8.8

CVE-2024-55590

Target: FortiIsolator - CLI
CVSS 8.8

CVE-2024-46662

Target: FortiManager - Management Plane
CVSS 8.6

CVE-2024-35277

Target: FortiPortal - Management Interface
CVSS 8.2

CVE-2024-36513

Target: FortiClient
CVSS 8.1

CVE-2026-24017

Target: FortiWeb - Web Application Firewall
CVSS 8.1

CVE-2024-23671

Target: FortiSandbox - Web Interface
CVSS 8.1

CVE-2024-47571

Target: FortiManager - FortiGate
CVSS 8.1

CVE-2025-49201

Target: FortiPAM - Web Interface
CVSS 8.1

CVE-2024-27782

Target: FortiAIOps - Web Interface
CVSS 8.1

CVE-2025-52970

Target: FortiWeb - Web Application Firewall
CVSS 8.1

CVE-2024-35279

Target: FortiOS - CAPWAP Control
CVSS 8.1

CVE-2024-26009

Target: FortiOS - FortiManager
CVSS 8.1

CVE-2025-54820

Target: FortiManager - Web UI
CVSS 8.1

CVE-2025-64447

Target: FortiWeb - Web Application Firewall
CVSS 8.1

CVE-2025-25249

Target: FortiOS - FortiSwitchManager
CVSS 8.1

CVE-2026-22153

Target: FortiOS - Agentless VPN/FSSO
CVSS 7.8

CVE-2025-47761

Target: FortiClient - fortips driver
CVSS 7.8

CVE-2024-47574

Target: FortiClient
CVSS 7.8

CVE-2025-54658

Target: FortiDLP Agent - Outlookproxy plugin
CVSS 7.8

CVE-2024-23670

Target: FortiWebManager - Web Interface
CVSS 7.8

CVE-2025-46373

Target: FortiClient - fortips_74.sys
CVSS 7.8

CVE-2024-23110

Target: FortiOS - Firewall
CVSS 7.8

CVE-2024-23667

Target: FortiWebManager - Web Interface
CVSS 7.8

CVE-2026-24018

Target: FortiClientLinux - Client
CVSS 7.6

CVE-2024-27783

Target: FortiAIOps - Web Interface
CVSS 7.5

CVE-2025-53843

Target: FortiOS - Firewall
CVSS 7.5

CVE-2024-26013

Target: FortiOS - Management Interface
CVSS 7.5

CVE-2024-26010

Target: FortiPAM - FortiPAM Server
CVSS 7.5

CVE-2024-23666

Target: FortiAnalyzer-BigData - FortiAnalyzer
CVSS 7.5

CVE-2025-58413

Target: FortiOS - Firewall
CVSS 7.5

CVE-2024-46667

Target: FortiSIEM - Core
CVSS 7.5

CVE-2024-48884

Target: FortiManager - Security Fabric Interface
CVSS 7.5

CVE-2024-23105

Target: FortiPortal - Web Interface
CVSS 7.3

CVE-2024-50563

Target: FortiManager - FortiAnalyzer
CVSS 7.3

CVE-2024-33508

Target: FortiClientEMS - Database
CVSS 7.3

CVE-2024-45331

Target: FortiAnalyzer - FortiAnalyzer Core
CVSS 7.3

CVE-2024-36507

Target: FortiClient
CVSS 7.2

CVE-2025-64156

Target: FortiVoice - Web Interface
CVSS 7.2

CVE-2026-22572

Target: FortiAnalyzer - Authentication Module
CVSS 7.2

CVE-2026-21743

Target: FortiAuthenticator - Authentication Service
CVSS 7.2

CVE-2024-45330

Target: FortiAnalyzer - Web UI
CVSS 7.2

CVE-2024-36512

Target: FortiManager - FortiAnalyzer
CVSS 7.2

CVE-2024-35273

Target: FortiManager - FortiManager Web UI
CVSS 7.2

CVE-2025-58034

Actively Exploited

Target: FortiWeb - Web Application Firewall
CVSS 7.2

CVE-2024-50566

Target: FortiManager Cloud - Web UI
CVSS 7.2

CVE-2024-40584

Target: FortiAnalyzer - GUI
CVSS 7.2

CVE-2024-50567

Target: FortiWeb - Web Application Firewall
CVSS 7.2

CVE-2024-54024

Target: FortiIsolator - CLI
CVSS 7.2

CVE-2024-52965

Target: FortiOS - Authentication Module
CVSS 7.2

CVE-2024-50571

Target: FortiAnalyzer - FortiAnalyzer Core
CVSS 7.2

CVE-2025-47856

Target: FortiVoice - Web UI
CVSS 7.2

CVE-2025-49813

Target: FortiADC - Web UI
CVSS 7.2

CVE-2025-68648

Target: FortiAnalyzer - FortiManager
CVSS 7.2

CVE-2025-66178

Target: FortiWeb - Web Server
CVSS 7.2

CVE-2025-59922

Target: FortiClientEMS - Web UI
CVSS 7.2

CVE-2026-25836

Target: FortiSandbox Cloud - Core
CVSS 7.2

CVE-2025-64153

Target: FortiExtender - Web UI
CVSS 7.2

CVE-2025-53949

Target: FortiSandbox - Web UI
CVSS 7.2

CVE-2025-53679

Target: FortiSandbox - OS Command Interface
CVSS 7.1

CVE-2025-62676

Target: FortiClient
CVSS 7.1

CVE-2024-27781

Target: FortiSandbox - Web UI