{"schema_version":1,"title":"Fortinet FortiGate NGFW vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 5 vulnerabilities in Fortinet FortiGate NGFW: 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2025-64157, was published on 10 February 2026.","url":"https://junglewise.ai/threats/technologies/fortigate-ngfw","json_url":"https://junglewise.ai/threats/technologies/fortigate-ngfw.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/fortigate-ngfw","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":1,"all_time":5,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":1},"latest":[{"cve":"CVE-2025-64157","cvss":6.7,"slug":"cve-2025-64157-fortinet-fortios-format-string-vulnerability-in-capwap-fast","title":"Fortinet FortiOS format string vulnerability in CAPWAP fast-failover mode","severity":"medium","exploited":false,"published_at":"2026-02-10T16:16:09.443+00:00","url":"https://junglewise.ai/threats/cve-2025-64157-fortinet-fortios-format-string-vulnerability-in-capwap-fast"},{"cve":"CVE-2025-53744","cvss":7.2,"epss":0.0068,"slug":"cve-2025-53744-fortinet-fortios-privilege-escalation-in-security-fabric","title":"Fortinet FortiOS privilege escalation in Security Fabric","severity":"high","exploited":false,"published_at":"2025-08-12T19:15:35.113+00:00","url":"https://junglewise.ai/threats/cve-2025-53744-fortinet-fortios-privilege-escalation-in-security-fabric"},{"cve":"CVE-2025-25248","cvss":5.3,"epss":0.0023,"slug":"cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn","title":"Fortinet FortiOS and FortiProxy integer overflow in SSL-VPN bookmarks","severity":"medium","exploited":false,"published_at":"2025-08-12T19:15:28.53+00:00","url":"https://junglewise.ai/threats/cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn"},{"cve":"CVE-2025-24471","cvss":6.5,"epss":0.0011,"slug":"cve-2025-24471-fortinet-fortios-improper-certificate-validation-in-eap","title":"Fortinet FortiOS Improper Certificate Validation in EAP authentication","severity":"medium","exploited":false,"published_at":"2025-06-10T17:21:16.277+00:00","url":"https://junglewise.ai/threats/cve-2025-24471-fortinet-fortios-improper-certificate-validation-in-eap"},{"cve":"CVE-2024-50562","cvss":4.8,"epss":0.0076,"slug":"cve-2024-50562-fortinet-fortios-insufficient-session-expiration-in-ssl-vpn","title":"Fortinet FortiOS insufficient session expiration in SSL-VPN","severity":"medium","exploited":false,"published_at":"2025-06-10T17:19:25.36+00:00","url":"https://junglewise.ai/threats/cve-2024-50562-fortinet-fortios-insufficient-session-expiration-in-ssl-vpn"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Fortinet FortiOS","slug":"fortios","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/fortios"},{"name":"Fortinet FortiProxy","slug":"fortiproxy","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/fortiproxy"},{"name":"Fortinet FortiPAM","slug":"fortipam","vulnerabilities":10,"url":"https://junglewise.ai/threats/technologies/fortipam"},{"name":"Fortinet Fortisase","slug":"fortisase","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortisase"},{"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortiswitchmanager"},{"name":"Fortinet FortiADC","slug":"fortiadc","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortiadc"},{"name":"Fortinet FortiSandbox","slug":"fortisandbox","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortisandbox"},{"name":"Fortinet FortiProxy SSL-VPN","slug":"fortiproxy-ssl-vpn","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiproxy-ssl-vpn"},{"name":"Fortinet FortiWeb","slug":"fortiweb","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiweb"},{"name":"Fortinet FortiSandbox Cloud","slug":"fortisandbox-cloud","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/fortisandbox-cloud"},{"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fortisandbox-paas"},{"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/forticlient-ems"}],"technology":{"hub":true,"name":"Fortinet FortiGate NGFW","slug":"fortigate-ngfw","vendor":{"name":"Fortinet","slug":"fortinet","url":"https://junglewise.ai/threats/vendors/fortinet"},"aliases":[],"category":"firewall","homepage":"https://www.fortinet.com/products/next-generation-firewall","description":"A next-generation firewall providing network security, threat protection, and deep packet inspection.","url":"https://junglewise.ai/threats/technologies/fortigate-ngfw"},"most_severe":[{"cve":"CVE-2025-53744","cvss":7.2,"epss":0.0068,"slug":"cve-2025-53744-fortinet-fortios-privilege-escalation-in-security-fabric","title":"Fortinet FortiOS privilege escalation in Security Fabric","severity":"high","exploited":false,"published_at":"2025-08-12T19:15:35.113+00:00","url":"https://junglewise.ai/threats/cve-2025-53744-fortinet-fortios-privilege-escalation-in-security-fabric"},{"cve":"CVE-2025-64157","cvss":6.7,"slug":"cve-2025-64157-fortinet-fortios-format-string-vulnerability-in-capwap-fast","title":"Fortinet FortiOS format string vulnerability in CAPWAP fast-failover mode","severity":"medium","exploited":false,"published_at":"2026-02-10T16:16:09.443+00:00","url":"https://junglewise.ai/threats/cve-2025-64157-fortinet-fortios-format-string-vulnerability-in-capwap-fast"},{"cve":"CVE-2025-24471","cvss":6.5,"epss":0.0011,"slug":"cve-2025-24471-fortinet-fortios-improper-certificate-validation-in-eap","title":"Fortinet FortiOS Improper Certificate Validation in EAP authentication","severity":"medium","exploited":false,"published_at":"2025-06-10T17:21:16.277+00:00","url":"https://junglewise.ai/threats/cve-2025-24471-fortinet-fortios-improper-certificate-validation-in-eap"},{"cve":"CVE-2025-25248","cvss":5.3,"epss":0.0023,"slug":"cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn","title":"Fortinet FortiOS and FortiProxy integer overflow in SSL-VPN bookmarks","severity":"medium","exploited":false,"published_at":"2025-08-12T19:15:28.53+00:00","url":"https://junglewise.ai/threats/cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn"},{"cve":"CVE-2024-50562","cvss":4.8,"epss":0.0076,"slug":"cve-2024-50562-fortinet-fortios-insufficient-session-expiration-in-ssl-vpn","title":"Fortinet FortiOS insufficient session expiration in SSL-VPN","severity":"medium","exploited":false,"published_at":"2025-06-10T17:19:25.36+00:00","url":"https://junglewise.ai/threats/cve-2024-50562-fortinet-fortios-insufficient-session-expiration-in-ssl-vpn"}],"generated_at":"2026-09-27T03:07:00.185062+00:00"}