Vendor
Fortinet vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 94 vulnerabilities in Fortinet: 1 in the last 7 days and 23 in the last 90 days, 36 of them critical and 29 exploited in the wild. The most recent, CVE-2026-84388, was published on 22 September 2026. 17 technologies have a page of their own.
- Last 7 days
- 1
- Last 90 days
- 23
- Critical, all time
- 36
- Exploited in the wild
- 29
About Fortinet
A multinational corporation that develops and sells cybersecurity solutions, including firewalls, endpoint security, and network security software.
Fortinet technologies
- Fortinet FortiOS54
- Fortinet FortiProxy34
- Fortinet FortiPAM9
- Fortinet Fortisase9
- Fortinet FortiSwitchManager9
- Fortinet FortiADC8
- Fortinet FortiSandbox8
- Fortinet FortiProxy SSL-VPN7
- Fortinet FortiWeb7
- Fortinet FortiSandbox Cloud6
- Fortinet FortiGate NGFW5
- Fortinet FortiSandbox PaaS5
- Fortinet FortiClient EMS4
- Fortinet FortiManager4
- Fortinet FortiAnalyzer3
- Fortinet FortiSOAR3
- Fortinet FortiSOAR PaaS3
Latest Fortinet vulnerabilities
- CVE-2026-84388: Fortinet FortiPAM Chrome Extension improper authentication flawcriticalCVSS 9.6EPSS 0.4%
- CVE-2026-84390: Fortinet FortiMonitorOnSight authentication bypass via static JWT keycriticalCVSS 9.8EPSS 0.5%
- CVE-2026-84393: Fortinet FortiOS and FortiProxy certificate validation bypass in ZTNA portalhighCVSS 8.1EPSS 0.3%
- CVE-2026-84392: Fortinet FortiOS, FortiProxy, FortiPAM NULL pointer dereference in httpsdlowCVSS 2.7EPSS 0.5%
- CVE-2026-84391: Fortinet FortiAnalyzer denial of service in SNMP daemonmediumCVSS 6.5EPSS 0.4%
- CVE-2026-84389: Fortinet FortiSIEM open redirect vulnerabilitylowCVSS 3.1EPSS 0.2%
- CVE-2026-84387: Fortinet FortiSandbox command injection in HTTP requestshighCVSS 7.2EPSS 1.4%
- CVE-2026-84386: Fortinet FortiClient Windows arbitrary process termination in minifilter drivermediumCVSS 5.1EPSS 0.1%
- CVE-2026-84385: Fortinet FortiSOAR improper access control in WebSocket streamsmediumCVSS 5.4EPSS 0.2%
- CVE-2026-26084: Fortinet FortiSandbox improper access control in web UIcriticalCVSS 9.9EPSS 0.4%
- CVE-2026-22575: Fortinet FortiManager improper access control in workflow approvalmediumCVSS 4.9EPSS 0.3%
- CVE-2026-59838: Fortinet FortiSIEM XSS in Domain parametermediumCVSS 5.9
- CVE-2026-59841: Fortinet FortiSIEM Windows Agent privilege escalation via hostname spoofinghighCVSS 7.5
- CVE-2026-59840: Fortinet FortiOS and FortiProxy buffer over-read in authd and wad daemonsmediumCVSS 4.3
- CVE-2026-59839: Fortinet FortiOS and FortiProxy path traversal in CLImediumCVSS 5.5
- CVE-2026-59837: Fortinet FortiOS and FortiPAM stack overflow in GUImediumCVSS 6.6
- CVE-2026-59836: Fortinet FortiClientEMS improper certificate validation in AD ConnectorhighCVSS 7.5
- CVE-2026-59835: Fortinet FortiSandbox unauthenticated VNC access in scanning VMshighCVSS 8.6
- CVE-2026-23573: Fortinet FortiOS and FortiProxy reflected XSS in Agentless SSL-VPNmediumCVSS 6.1
- CVE-2025-62826: Fortinet FortiOS and FortiProxy HTTP Response Splitting in captive portallowCVSS 3.1
- CVE-2025-62675: Fortinet FortiOS and FortiProxy HTTP response splitting in Web FilterlowCVSS 3.4
- CVE-2025-53379: Fortinet FortiAuthenticator out-of-bounds read in GUIhighCVSS 7.5
- CVE-2025-43892: Fortinet FortiOS buffer over-read in redirect responsemediumCVSS 4.3
- CVE-2026-49938: Fortinet FortiPortal improper access control in API endpointsmediumCVSS 6.5
- CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UIcriticalexploited in the wildCVSS 9.8EPSS 23.4%
Most severe Fortinet vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2025-64446: Fortinet FortiWeb path traversal and command executioncriticalexploited in the wildCVSS 9.8EPSS 92.9%
- CVE-2026-35616: Fortinet FortiClientEMS improper access control in APIcriticalexploited in the wildCVSS 9.8EPSS 88.9%
- CVE-2026-21643: Fortinet FortiClient EMS SQL injectioncriticalexploited in the wildCVSS 9.8EPSS 62.5%
- CVE-2026-39808: Fortinet FortiSandbox OS command injection in API endpointcriticalexploited in the wildCVSS 9.8EPSS 48.7%
- CVE-2025-25257: Fortinet FortiWeb SQL injectioncriticalexploited in the wildCVSS 9.8EPSS 27.8%
- CVE-2026-25089: Fortinet FortiSandbox OS command injection in Web UIcriticalexploited in the wildCVSS 9.8EPSS 23.4%
- CVE-2025-59718: Fortinet Multiple Products auth bypass via improper SAML signature verificationcriticalexploited in the wildCVSS 9.8EPSS 9.5%
- CVE-2026-24858: Fortinet Multiple Products authentication bypass in FortiCloud SSOcriticalexploited in the wildCVSS 9.8EPSS 4.8%
- CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerabilitycriticalexploited in the wildCVSS 9.8
- CVE-2024-47575: Fortinet FortiManager Missing Authentication Vulnerabilitycriticalexploited in the wildCVSS 9.8
Vulnerabilities per week
The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 29 Jun 2026 | 0 | 0 | |
| 6 Jul 2026 | 0 | 0 | |
| 13 Jul 2026 | 12 | 0 | |
| 20 Jul 2026 | 0 | 0 | |
| 27 Jul 2026 | 0 | 0 | |
| 3 Aug 2026 | 0 | 0 | |
| 10 Aug 2026 | 0 | 0 | |
| 17 Aug 2026 | 0 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 10 | 2 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 1 | 1 |
How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/vendors/fortinet.json, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "Fortinet vulnerabilities", https://junglewise.ai/threats/vendors/fortinet, 26 September 2026.