Fortinet: CISA KEV History
Every Fortinet vulnerability in the CISA Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, addition timeline, and ransomware linkage. Rebuilt automatically on every site deploy.
Snapshot: 2026-10-16 · Source: CISA KEV Catalog · Full KEV dashboard · Additions by date
Fortinet KEV additions per month, last 24 months
Most-listed products: FortiOS, Multiple Products, FortiOS and FortiProxy, FortiClient EMS, FortiWeb.
Latest 31 of 31 Fortinet KEV entries
| CVE | Vulnerability | Added | Ransomware |
|---|---|---|---|
| CVE-2026-104286 | Fortinet FortiMail Path Traversal Vulnerability | 2026-10-01 | No |
| CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 2026-09-09 | No |
| CVE-2025-68686 | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-07-27 | No |
| CVE-2026-25089 | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | No |
| CVE-2026-39808 | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | No |
| CVE-2026-21643 | Fortinet FortiClient EMS SQL Injection Vulnerability | 2026-04-13 | No |
| CVE-2026-35616 | Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-06 | No |
| CVE-2026-24858 | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulner | 2026-01-27 | No |
| CVE-2025-59718 | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 2025-12-16 | No |
| CVE-2025-58034 | Fortinet FortiWeb OS Command Injection Vulnerability | 2025-11-18 | No |
| CVE-2025-64446 | Fortinet FortiWeb Path Traversal Vulnerability | 2025-11-14 | No |
| CVE-2025-25257 | Fortinet FortiWeb SQL Injection Vulnerability | 2025-07-18 | No |
| CVE-2019-6693 | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 2025-06-25 | Yes |
| CVE-2025-32756 | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 2025-05-14 | No |
| CVE-2025-24472 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-03-18 | Yes |
| CVE-2024-55591 | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-01-14 | Yes |
| CVE-2024-47575 | Fortinet FortiManager Missing Authentication Vulnerability | 2024-10-23 | No |
| CVE-2024-23113 | Fortinet Multiple Products Format String Vulnerability | 2024-10-09 | No |
| CVE-2023-48788 | Fortinet FortiClient EMS SQL Injection Vulnerability | 2024-03-25 | Yes |
| CVE-2024-21762 | Fortinet FortiOS Out-of-Bound Write Vulnerability | 2024-02-09 | Yes |
| CVE-2023-27997 | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 2023-06-13 | Yes |
| CVE-2022-41328 | Fortinet FortiOS Path Traversal Vulnerability | 2023-03-14 | No |
| CVE-2022-42475 | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 2022-12-13 | Yes |
| CVE-2022-40684 | Fortinet Multiple Products Authentication Bypass Vulnerability | 2022-10-11 | Yes |
| CVE-2018-13374 | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 2022-09-08 | Yes |
| CVE-2018-13382 | Fortinet FortiOS and FortiProxy Improper Authorization | 2022-01-10 | Yes |
| CVE-2018-13383 | Fortinet FortiOS and FortiProxy Out-of-bounds Write | 2022-01-10 | Yes |
| CVE-2021-44168 | Fortinet FortiOS Arbitrary File Download | 2021-12-10 | No |
| CVE-2019-5591 | Fortinet FortiOS Default Configuration Vulnerability | 2021-11-03 | Yes |
| CVE-2020-12812 | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 2021-11-03 | Yes |
| CVE-2018-13379 | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 2021-11-03 | Yes |
CVE links go to our explainer when one exists, otherwise to the NVD record.
Our Fortinet CVE explainers
Plain-English impact, affected versions, and a response runbook for each, sourced from NVD and vendor advisories.
Data: official CISA KEV catalog, fetched at build time. Figures may be reused with attribution to East Bay Cyber and CISA. See also the KEV Velocity Dashboard and all tracked vendors.