Vendor
Fortinet vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 262 vulnerabilities in Fortinet: 97 in the last 7 days and 120 in the last 90 days, 59 of them critical and 31 exploited in the wild. The most recent, CVE-2026-126263, was published on 11 November 2026. 11 vulnerabilities in the last four weeks, up 450% on the four before (2). 2 critical against 2, 0 exploited in the wild against 1. 29 technologies have a page of their own.
- Last 7 days
- 97
- Last 90 days
- 120
- Critical, all time
- 59
- Exploited in the wild
- 31
About Fortinet
A multinational corporation that develops and sells cybersecurity solutions, including firewalls, endpoint security, and network security software.
Fortinet technologies
- Fortinet FortiOS66
- Fortinet FortiManager54
- Fortinet FortiManager Cloud48
- Fortinet FortiAnalyzer47
- Fortinet Fortianalyzer Cloud42
- Fortinet FortiProxy35
- Fortinet FortiMail31
- Fortinet FortiAuthenticator22
- Fortinet FortiSandbox17
- Fortinet FortiWeb16
- Fortinet Fortisase13
- Fortinet FortiPAM12
- Fortinet FortiSandbox Cloud12
- Fortinet FortiADC11
- Fortinet FortiSOAR11
- Fortinet FortiSwitchManager9
- Fortinet FortiProxy SSL-VPN7
- Fortinet FortiSandbox PaaS7
- Fortinet Forticlient5
- Fortinet FortiGate NGFW5
- Fortinet FortiSASE-Sovereign5
- Fortinet FortiSIEM5
- Fortinet FortiClient EMS4
- Fortinet FortiClientEMS4
- Fortinet Fortidlp Agent4
- Fortinet Fortiextender3
- Fortinet Fortiextender Firmware3
- Fortinet FortiSOAR PaaS3
- Fortinet Fortivoice3
Latest Fortinet vulnerabilities
- CVE-2026-126263: Fortinet FortiMail SQL injectioncriticalCVSS 9.8
- CVE-2026-126262: Fortinet FortiAnalyzer and FortiManager SQL injection in OFTPcriticalCVSS 9.8
- CVE-2026-126259: Fortinet FortiOS authentication bypass in HA command executioncriticalCVSS 9.8
- CVE-2026-126258: Fortinet FortiOS stack buffer overflow in WAD proxyhighCVSS 7.5
- CVE-2026-126257: Fortinet FortiAuthenticator hard-coded password authentication bypasscriticalCVSS 9
- CVE-2026-126256: Fortinet FortiOS out-of-bounds read in kernelhighCVSS 7.4
- CVE-2026-126255: Fortinet FortiOS path traversal authentication bypass in SSH daemonhighCVSS 7.4
- CVE-2026-126254: Fortinet FortiOS numeric truncation error in BGP daemoncriticalCVSS 9.6
- CVE-2026-126253: Fortinet FortiOS authentication bypass in OSPF daemoncriticalCVSS 9.3
- CVE-2026-126252: Fortinet FortiAuthenticator SQL injectionhighCVSS 8.3
- CVE-2026-126251: Fortinet FortiAuthenticator incorrect authorizationcriticalCVSS 9.1
- CVE-2026-126250: Fortinet FortiAuthenticator authorization bypass DoShighCVSS 8.2
- CVE-2026-126249: Fortinet FortiAuthenticator privilege escalation in GUIhighCVSS 7.2
- CVE-2026-126248: Fortinet FortiAuthenticator insufficiently protected credentialshighCVSS 7.5
- CVE-2026-126247: Fortinet FortiAuthenticator format string code executionhighCVSS 7.2
- CVE-2026-126246: Fortinet FortiAuthenticator null pointer dereferencehighCVSS 7.5
- CVE-2026-126245: Fortinet FortiAuthenticator out-of-bounds write in APIhighCVSS 8.1
- CVE-2026-126244: Fortinet FortiAuthenticator resource exhaustion denial of servicehighCVSS 7.5
- CVE-2026-126243: Fortinet FortiAuthenticator incorrect authorizationhighCVSS 7.2
- CVE-2026-126242: Fortinet FortiAuthenticator incorrect authorization in APIhighCVSS 7.4
- CVE-2026-126241: Fortinet FortiAuthenticator SQL injection in APIhighCVSS 8.8
- CVE-2026-126240: Fortinet FortiAuthenticator LDAP injection authentication bypasshighCVSS 8.2
- CVE-2026-126239: Fortinet FortiAuthenticator stack-based buffer overflowhighCVSS 7.5
- CVE-2026-126238: Fortinet FortiAuthenticator incorrect authorization in REST APIhighCVSS 8.6
- CVE-2026-126237: Fortinet FortiAuthenticator infinite loop denial of servicehighCVSS 7.5
Most severe Fortinet vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-64446: Fortinet FortiWeb path traversal and command executioncriticalexploited in the wildCVSS 9.8EPSS 92.0%
- CVE-2026-35616: Fortinet FortiClientEMS improper access control in APIcriticalexploited in the wildCVSS 9.8EPSS 88.9%
- CVE-2026-21643: Fortinet FortiClient EMS SQL injectioncriticalexploited in the wildCVSS 9.8EPSS 62.5%
- CVE-2026-39808: Fortinet FortiSandbox OS command injection in API endpointcriticalexploited in the wildCVSS 9.8EPSS 48.7%
- CVE-2025-25257: Fortinet FortiWeb SQL injectioncriticalexploited in the wildCVSS 9.8EPSS 27.8%
- CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UIcriticalexploited in the wildCVSS 9.8EPSS 23.4%
- CVE-2025-59718: Fortinet Multiple Products auth bypass via improper SAML signature verificationcriticalexploited in the wildCVSS 9.8EPSS 9.5%
- CVE-2026-24858: Fortinet Multiple Products authentication bypass in FortiCloud SSOcriticalexploited in the wildCVSS 9.8EPSS 4.8%
- CVE-2026-104286: Fortinet FortiMail path traversal vulnerabilitycriticalexploited in the wildCVSS 9.8EPSS 2.2%
- CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerabilitycriticalexploited in the wildCVSS 9.8
Vulnerabilities per week
11 vulnerabilities in the last four weeks, up 450% on the four before (2). 2 critical against 2, 0 exploited in the wild against 1. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 10 | 2 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 1 | 1 | |
| 28 Sep 2026 | 1 | 1 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 9 | 1 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 2 | 1 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 97 | 18 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many Fortinet vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/vendors/fortinet)<a href="https://junglewise.ai/threats/vendors/fortinet"><img src="https://junglewise.ai/threats/vendors/fortinet/badge.svg" alt="Fortinet vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/fortinet.json, and this page as text at https://junglewise.ai/threats/vendors/fortinet.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Fortinet vulnerabilities", https://junglewise.ai/threats/vendors/fortinet, 13 November 2026.