{"schema_version":1,"title":"Fortinet FortiProxy vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 34 vulnerabilities in Fortinet FortiProxy: 0 in the last 7 days and 8 in the last 90 days, 15 of them critical and 14 exploited in the wild. The most recent, CVE-2026-84393, was published on 8 September 2026.","url":"https://junglewise.ai/threats/technologies/fortiproxy","json_url":"https://junglewise.ai/threats/technologies/fortiproxy.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/fortiproxy","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":3,"all_time":34,"critical":15,"exploited":14,"last_7_days":0,"last_30_days":2,"last_90_days":8,"last_365_days":20},"latest":[{"cve":"CVE-2026-84393","cvss":8.1,"epss":0.0025,"slug":"cve-2026-84393-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in","title":"Fortinet FortiOS and FortiProxy certificate validation bypass in ZTNA portal","severity":"high","exploited":false,"published_at":"2026-09-08T17:18:37.883+00:00","url":"https://junglewise.ai/threats/cve-2026-84393-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in"},{"cve":"CVE-2026-84392","cvss":2.7,"epss":0.005,"slug":"cve-2026-84392-fortinet-fortios-fortiproxy-fortipam-null-pointer-dereference-in","title":"Fortinet FortiOS, FortiProxy, FortiPAM NULL pointer dereference in httpsd","severity":"low","exploited":false,"published_at":"2026-09-08T17:18:37.67+00:00","url":"https://junglewise.ai/threats/cve-2026-84392-fortinet-fortios-fortiproxy-fortipam-null-pointer-dereference-in"},{"cve":"CVE-2026-59840","cvss":4.3,"slug":"cve-2026-59840-fortinet-fortios-and-fortiproxy-buffer-over-read-in-authd-and-wad","title":"Fortinet FortiOS and FortiProxy buffer over-read in authd and wad daemons","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:03.297+00:00","url":"https://junglewise.ai/threats/cve-2026-59840-fortinet-fortios-and-fortiproxy-buffer-over-read-in-authd-and-wad"},{"cve":"CVE-2026-59839","cvss":5.5,"slug":"cve-2026-59839-fortinet-fortios-and-fortiproxy-path-traversal-in-cli","title":"Fortinet FortiOS and FortiProxy path traversal in CLI","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:03.047+00:00","url":"https://junglewise.ai/threats/cve-2026-59839-fortinet-fortios-and-fortiproxy-path-traversal-in-cli"},{"cve":"CVE-2026-59837","cvss":6.6,"slug":"cve-2026-59837-fortinet-fortios-and-fortipam-stack-overflow-in-gui","title":"Fortinet FortiOS and FortiPAM stack overflow in GUI","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:02.853+00:00","url":"https://junglewise.ai/threats/cve-2026-59837-fortinet-fortios-and-fortipam-stack-overflow-in-gui"},{"cve":"CVE-2026-23573","cvss":6.1,"slug":"cve-2026-23573-fortinet-fortios-and-fortiproxy-reflected-xss-in-agentless-ssl","title":"Fortinet FortiOS and FortiProxy reflected XSS in Agentless SSL-VPN","severity":"medium","exploited":false,"published_at":"2026-07-14T16:16:51.823+00:00","url":"https://junglewise.ai/threats/cve-2026-23573-fortinet-fortios-and-fortiproxy-reflected-xss-in-agentless-ssl"},{"cve":"CVE-2025-62826","cvss":3.1,"slug":"cve-2025-62826-fortinet-fortios-and-fortiproxy-http-response-splitting-in","title":"Fortinet FortiOS and FortiProxy HTTP Response Splitting in captive portal","severity":"low","exploited":false,"published_at":"2026-07-14T16:16:42.85+00:00","url":"https://junglewise.ai/threats/cve-2025-62826-fortinet-fortios-and-fortiproxy-http-response-splitting-in"},{"cve":"CVE-2025-62675","cvss":3.4,"slug":"cve-2025-62675-fortinet-fortios-and-fortiproxy-http-response-splitting-in-web","title":"Fortinet FortiOS and FortiProxy HTTP response splitting in Web Filter","severity":"low","exploited":false,"published_at":"2026-07-14T16:16:42.617+00:00","url":"https://junglewise.ai/threats/cve-2025-62675-fortinet-fortios-and-fortiproxy-http-response-splitting-in-web"},{"cve":"CVE-2025-67862","cvss":6.7,"slug":"cve-2025-67862-fortinet-fortios-and-fortiproxy-lua-script-execution-in-cli","title":"Fortinet FortiOS and FortiProxy Lua script execution in CLI","severity":"medium","exploited":false,"published_at":"2026-06-09T16:16:35.5+00:00","url":"https://junglewise.ai/threats/cve-2025-67862-fortinet-fortios-and-fortiproxy-lua-script-execution-in-cli"},{"cve":"CVE-2025-61624","cvss":6,"slug":"cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli","title":"Fortinet multiple products path traversal in CLI","severity":"medium","exploited":false,"published_at":"2026-04-14T16:16:31.3+00:00","url":"https://junglewise.ai/threats/cve-2025-61624-fortinet-multiple-products-path-traversal-in-cli"},{"cve":"CVE-2026-24858","cvss":9.8,"epss":0.048,"slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2025-59719","cvss":9.8,"epss":0.0026,"slug":"cve-2025-59719-fortinet-multiple-products-forticloud-sso-auth-bypass-via-saml","title":"Fortinet Multiple Products FortiCloud SSO auth bypass via SAML signature flaw","severity":"critical","exploited":false,"published_at":"2025-12-09T18:15:55.15+00:00","url":"https://junglewise.ai/threats/cve-2025-59719-fortinet-multiple-products-forticloud-sso-auth-bypass-via-saml"},{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2025-54821","cvss":1.9,"epss":0.0001,"slug":"cve-2025-54821-fortinet-fortios-improper-privilege-management-in-cli","title":"Fortinet FortiOS Improper Privilege Management in CLI","severity":"low","exploited":false,"published_at":"2025-11-18T17:16:03.49+00:00","url":"https://junglewise.ai/threats/cve-2025-54821-fortinet-fortios-improper-privilege-management-in-cli"},{"cve":"CVE-2025-57740","cvss":7.5,"epss":0.0008,"slug":"cve-2025-57740-fortinet-fortios-heap-overflow-in-ssl-vpn-rdp-bookmarks","title":"Fortinet FortiOS heap overflow in SSL-VPN RDP bookmarks","severity":"high","exploited":false,"published_at":"2025-10-14T16:15:40.293+00:00","url":"https://junglewise.ai/threats/cve-2025-57740-fortinet-fortios-heap-overflow-in-ssl-vpn-rdp-bookmarks"},{"cve":"CVE-2025-47890","cvss":2.6,"epss":0.0001,"slug":"cve-2025-47890-fortinet-fortios-and-fortiproxy-open-redirect-in-web-filter","title":"Fortinet FortiOS and FortiProxy Open Redirect in Web Filter warning page","severity":"low","exploited":false,"published_at":"2025-10-14T16:15:38.667+00:00","url":"https://junglewise.ai/threats/cve-2025-47890-fortinet-fortios-and-fortiproxy-open-redirect-in-web-filter"},{"cve":"CVE-2025-31514","cvss":2.7,"epss":0.0004,"slug":"cve-2025-31514-fortinet-fortios-sensitive-information-disclosure-in-logs","title":"Fortinet FortiOS sensitive information disclosure in logs","severity":"low","exploited":false,"published_at":"2025-10-14T16:15:37.587+00:00","url":"https://junglewise.ai/threats/cve-2025-31514-fortinet-fortios-sensitive-information-disclosure-in-logs"},{"cve":"CVE-2025-31366","cvss":4.7,"epss":0.0002,"slug":"cve-2025-31366-fortinet-fortios-and-fortiproxy-xss-and-open-redirect-in-web","title":"Fortinet FortiOS and FortiProxy XSS and Open Redirect in Web Filter","severity":"medium","exploited":false,"published_at":"2025-10-14T16:15:37.423+00:00","url":"https://junglewise.ai/threats/cve-2025-31366-fortinet-fortios-and-fortiproxy-xss-and-open-redirect-in-web"},{"cve":"CVE-2025-25253","cvss":7.5,"epss":0.0001,"slug":"cve-2025-25253-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in","title":"Fortinet FortiOS and FortiProxy certificate validation bypass in ZTNA proxy","severity":"high","exploited":false,"published_at":"2025-10-14T16:15:36.85+00:00","url":"https://junglewise.ai/threats/cve-2025-25253-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in"},{"cve":"CVE-2025-22862","cvss":6.7,"epss":0.0003,"slug":"cve-2025-22862-fortinet-fortios-and-fortiproxy-privilege-escalation-in","title":"Fortinet FortiOS and FortiProxy privilege escalation in Automation Stitch","severity":"medium","exploited":false,"published_at":"2025-10-02T13:15:31.52+00:00","url":"https://junglewise.ai/threats/cve-2025-22862-fortinet-fortios-and-fortiproxy-privilege-escalation-in"},{"cve":"CVE-2025-25248","cvss":5.3,"epss":0.0023,"slug":"cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn","title":"Fortinet FortiOS and FortiProxy integer overflow in SSL-VPN bookmarks","severity":"medium","exploited":false,"published_at":"2025-08-12T19:15:28.53+00:00","url":"https://junglewise.ai/threats/cve-2025-25248-fortinet-fortios-and-fortiproxy-integer-overflow-in-ssl-vpn"},{"cve":"CVE-2024-55599","cvss":5.3,"epss":0.0016,"slug":"cve-2024-55599-fortinet-fortios-and-fortiproxy-dns-filter-bypass-via-apple","title":"Fortinet FortiOS and FortiProxy DNS filter bypass via Apple devices","severity":"medium","exploited":false,"published_at":"2025-07-08T15:15:23.87+00:00","url":"https://junglewise.ai/threats/cve-2024-55599-fortinet-fortios-and-fortiproxy-dns-filter-bypass-via-apple"},{"cve":"CVE-2019-6693","cvss":6.5,"epss":0.7222,"slug":"cve-2019-6693-fortinet-fortios-hard-coded-cryptographic-key-in-configuration","title":"Fortinet FortiOS hard-coded cryptographic key in configuration backups","severity":"critical","exploited":true,"published_at":"2025-06-25T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2019-6693-fortinet-fortios-hard-coded-cryptographic-key-in-configuration"},{"cve":"CVE-2025-24472","cvss":8.1,"slug":"cve-2025-24472-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-03-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-24472-fortinet-fortios-and-fortiproxy-authentication-bypass"},{"cve":"CVE-2024-55591","cvss":9.8,"slug":"cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":6},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":2},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[{"name":"Fortinet FortiOS","slug":"fortios","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/fortios"},{"name":"Fortinet FortiPAM","slug":"fortipam","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortipam"},{"name":"Fortinet Fortisase","slug":"fortisase","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortisase"},{"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortiswitchmanager"},{"name":"Fortinet FortiADC","slug":"fortiadc","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortiadc"},{"name":"Fortinet FortiSandbox","slug":"fortisandbox","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortisandbox"},{"name":"Fortinet FortiProxy SSL-VPN","slug":"fortiproxy-ssl-vpn","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiproxy-ssl-vpn"},{"name":"Fortinet FortiWeb","slug":"fortiweb","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiweb"},{"name":"Fortinet FortiSandbox Cloud","slug":"fortisandbox-cloud","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/fortisandbox-cloud"},{"name":"Fortinet FortiGate NGFW","slug":"fortigate-ngfw","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fortigate-ngfw"},{"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fortisandbox-paas"},{"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/forticlient-ems"}],"technology":{"hub":true,"name":"Fortinet FortiProxy","slug":"fortiproxy","vendor":{"name":"Fortinet","slug":"fortinet","url":"https://junglewise.ai/threats/vendors/fortinet"},"aliases":[],"category":"web-server","homepage":"https://www.fortinet.com/products/secure-web-gateway/fortiproxy","description":"A secure web proxy that provides web filtering, DNS filtering, and data loss prevention.","url":"https://junglewise.ai/threats/technologies/fortiproxy"},"most_severe":[{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2026-24858","cvss":9.8,"epss":0.048,"slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2024-55591","cvss":9.8,"slug":"cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass"},{"cve":"CVE-2024-23113","cvss":9.8,"slug":"cve-2024-23113-fortinet-multiple-products-format-string-vulnerability","title":"Fortinet Multiple Products Format String Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-23113-fortinet-multiple-products-format-string-vulnerability"},{"cve":"CVE-2024-21762","cvss":9.8,"slug":"cve-2024-21762-fortinet-fortios-out-of-bound-write-vulnerability","title":"Fortinet FortiOS Out-of-Bound Write Vulnerability","severity":"critical","exploited":true,"published_at":"2024-02-09T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-21762-fortinet-fortios-out-of-bound-write-vulnerability"},{"cve":"CVE-2023-27997","cvss":9.8,"slug":"cve-2023-27997-fortinet-fortios-and-fortiproxy-ssl-vpn-heap-based-buffer","title":"Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2023-06-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2023-27997-fortinet-fortios-and-fortiproxy-ssl-vpn-heap-based-buffer"},{"cve":"CVE-2022-42475","cvss":9.8,"slug":"cve-2022-42475-fortinet-fortios-heap-based-buffer-overflow-vulnerability","title":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","severity":"critical","exploited":true,"published_at":"2022-12-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-42475-fortinet-fortios-heap-based-buffer-overflow-vulnerability"},{"cve":"CVE-2022-40684","cvss":9.8,"slug":"cve-2022-40684-fortinet-multiple-products-authentication-bypass-vulnerability","title":"Fortinet Multiple Products Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2022-10-11T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2022-40684-fortinet-multiple-products-authentication-bypass-vulnerability"},{"cve":"CVE-2018-13379","cvss":9.8,"slug":"cve-2018-13379-fortinet-fortios-ssl-vpn-path-traversal-vulnerability","title":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","severity":"critical","exploited":true,"published_at":"2021-11-03T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13379-fortinet-fortios-ssl-vpn-path-traversal-vulnerability"},{"cve":"CVE-2018-13382","cvss":9.1,"slug":"cve-2018-13382-fortinet-fortios-and-fortiproxy-improper-authorization","title":"Fortinet FortiOS and FortiProxy Improper Authorization","severity":"critical","exploited":true,"published_at":"2022-01-10T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2018-13382-fortinet-fortios-and-fortiproxy-improper-authorization"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}