{"schema_version":1,"title":"Fortinet vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 94 vulnerabilities in Fortinet: 1 in the last 7 days and 23 in the last 90 days, 36 of them critical and 29 exploited in the wild. The most recent, CVE-2026-84388, was published on 22 September 2026. 17 technologies have a page of their own.","url":"https://junglewise.ai/threats/vendors/fortinet","json_url":"https://junglewise.ai/threats/vendors/fortinet.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/fortinet","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","counts":{"high":16,"all_time":94,"critical":36,"exploited":29,"last_7_days":1,"last_30_days":11,"last_90_days":23,"last_365_days":69},"latest":[{"cve":"CVE-2026-84388","cvss":9.6,"epss":0.0038,"slug":"cve-2026-84388-a-improper-restriction-of-rendered-ui-layers-or-frames","title":"Fortinet FortiPAM Chrome Extension improper authentication flaw","severity":"critical","exploited":false,"published_at":"2026-09-22T15:17:18.95+00:00","url":"https://junglewise.ai/threats/cve-2026-84388-a-improper-restriction-of-rendered-ui-layers-or-frames"},{"cve":"CVE-2026-84390","cvss":9.8,"epss":0.0052,"slug":"cve-2026-84390-fortinet-fortimonitoronsight-authentication-bypass-via-static-jwt","title":"Fortinet FortiMonitorOnSight authentication bypass via static JWT key","severity":"critical","exploited":false,"published_at":"2026-09-11T13:18:18.98+00:00","url":"https://junglewise.ai/threats/cve-2026-84390-fortinet-fortimonitoronsight-authentication-bypass-via-static-jwt"},{"cve":"CVE-2026-84393","cvss":8.1,"epss":0.0025,"slug":"cve-2026-84393-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in","title":"Fortinet FortiOS and FortiProxy certificate validation bypass in ZTNA portal","severity":"high","exploited":false,"published_at":"2026-09-08T17:18:37.883+00:00","url":"https://junglewise.ai/threats/cve-2026-84393-fortinet-fortios-and-fortiproxy-certificate-validation-bypass-in"},{"cve":"CVE-2026-84392","cvss":2.7,"epss":0.005,"slug":"cve-2026-84392-fortinet-fortios-fortiproxy-fortipam-null-pointer-dereference-in","title":"Fortinet FortiOS, FortiProxy, FortiPAM NULL pointer dereference in httpsd","severity":"low","exploited":false,"published_at":"2026-09-08T17:18:37.67+00:00","url":"https://junglewise.ai/threats/cve-2026-84392-fortinet-fortios-fortiproxy-fortipam-null-pointer-dereference-in"},{"cve":"CVE-2026-84391","cvss":6.5,"epss":0.0041,"slug":"cve-2026-84391-fortinet-fortianalyzer-denial-of-service-in-snmp-daemon","title":"Fortinet FortiAnalyzer denial of service in SNMP daemon","severity":"medium","exploited":false,"published_at":"2026-09-08T17:18:37.52+00:00","url":"https://junglewise.ai/threats/cve-2026-84391-fortinet-fortianalyzer-denial-of-service-in-snmp-daemon"},{"cve":"CVE-2026-84389","cvss":3.1,"epss":0.0022,"slug":"cve-2026-84389-fortinet-fortisiem-open-redirect-vulnerability","title":"Fortinet FortiSIEM open redirect vulnerability","severity":"low","exploited":false,"published_at":"2026-09-08T17:18:37.41+00:00","url":"https://junglewise.ai/threats/cve-2026-84389-fortinet-fortisiem-open-redirect-vulnerability"},{"cve":"CVE-2026-84387","cvss":7.2,"epss":0.014,"slug":"cve-2026-84387-fortinet-fortisandbox-command-injection-in-http-requests","title":"Fortinet FortiSandbox command injection in HTTP requests","severity":"high","exploited":false,"published_at":"2026-09-08T17:18:37.29+00:00","url":"https://junglewise.ai/threats/cve-2026-84387-fortinet-fortisandbox-command-injection-in-http-requests"},{"cve":"CVE-2026-84386","cvss":5.1,"epss":0.0014,"slug":"cve-2026-84386-fortinet-forticlient-windows-arbitrary-process-termination-in","title":"Fortinet FortiClient Windows arbitrary process termination in minifilter driver","severity":"medium","exploited":false,"published_at":"2026-09-08T17:18:37.173+00:00","url":"https://junglewise.ai/threats/cve-2026-84386-fortinet-forticlient-windows-arbitrary-process-termination-in"},{"cve":"CVE-2026-84385","cvss":5.4,"epss":0.0023,"slug":"cve-2026-84385-fortinet-fortisoar-improper-access-control-in-websocket-streams","title":"Fortinet FortiSOAR improper access control in WebSocket streams","severity":"medium","exploited":false,"published_at":"2026-09-08T17:18:37.03+00:00","url":"https://junglewise.ai/threats/cve-2026-84385-fortinet-fortisoar-improper-access-control-in-websocket-streams"},{"cve":"CVE-2026-26084","cvss":9.9,"epss":0.0039,"slug":"cve-2026-26084-fortinet-fortisandbox-improper-access-control-in-web-ui","title":"Fortinet FortiSandbox improper access control in web UI","severity":"critical","exploited":false,"published_at":"2026-09-08T17:17:34.59+00:00","url":"https://junglewise.ai/threats/cve-2026-26084-fortinet-fortisandbox-improper-access-control-in-web-ui"},{"cve":"CVE-2026-22575","cvss":4.9,"epss":0.0025,"slug":"cve-2026-22575-fortinet-fortimanager-improper-access-control-in-workflow","title":"Fortinet FortiManager improper access control in workflow approval","severity":"medium","exploited":false,"published_at":"2026-09-08T17:17:34.407+00:00","url":"https://junglewise.ai/threats/cve-2026-22575-fortinet-fortimanager-improper-access-control-in-workflow"},{"cve":"CVE-2026-59838","cvss":5.9,"slug":"cve-2026-59838-fortinet-fortisiem-xss-in-domain-parameter","title":"Fortinet FortiSIEM XSS in Domain parameter","severity":"medium","exploited":false,"published_at":"2026-07-15T14:18:33.057+00:00","url":"https://junglewise.ai/threats/cve-2026-59838-fortinet-fortisiem-xss-in-domain-parameter"},{"cve":"CVE-2026-59841","cvss":7.5,"slug":"cve-2026-59841-fortinet-fortisiem-windows-agent-privilege-escalation-via","title":"Fortinet FortiSIEM Windows Agent privilege escalation via hostname spoofing","severity":"high","exploited":false,"published_at":"2026-07-14T16:17:03.52+00:00","url":"https://junglewise.ai/threats/cve-2026-59841-fortinet-fortisiem-windows-agent-privilege-escalation-via"},{"cve":"CVE-2026-59840","cvss":4.3,"slug":"cve-2026-59840-fortinet-fortios-and-fortiproxy-buffer-over-read-in-authd-and-wad","title":"Fortinet FortiOS and FortiProxy buffer over-read in authd and wad daemons","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:03.297+00:00","url":"https://junglewise.ai/threats/cve-2026-59840-fortinet-fortios-and-fortiproxy-buffer-over-read-in-authd-and-wad"},{"cve":"CVE-2026-59839","cvss":5.5,"slug":"cve-2026-59839-fortinet-fortios-and-fortiproxy-path-traversal-in-cli","title":"Fortinet FortiOS and FortiProxy path traversal in CLI","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:03.047+00:00","url":"https://junglewise.ai/threats/cve-2026-59839-fortinet-fortios-and-fortiproxy-path-traversal-in-cli"},{"cve":"CVE-2026-59837","cvss":6.6,"slug":"cve-2026-59837-fortinet-fortios-and-fortipam-stack-overflow-in-gui","title":"Fortinet FortiOS and FortiPAM stack overflow in GUI","severity":"medium","exploited":false,"published_at":"2026-07-14T16:17:02.853+00:00","url":"https://junglewise.ai/threats/cve-2026-59837-fortinet-fortios-and-fortipam-stack-overflow-in-gui"},{"cve":"CVE-2026-59836","cvss":7.5,"slug":"cve-2026-59836-fortinet-forticlientems-improper-certificate-validation-in-ad","title":"Fortinet FortiClientEMS improper certificate validation in AD Connector","severity":"high","exploited":false,"published_at":"2026-07-14T16:17:02.727+00:00","url":"https://junglewise.ai/threats/cve-2026-59836-fortinet-forticlientems-improper-certificate-validation-in-ad"},{"cve":"CVE-2026-59835","cvss":8.6,"slug":"cve-2026-59835-fortinet-fortisandbox-unauthenticated-vnc-access-in-scanning-vms","title":"Fortinet FortiSandbox unauthenticated VNC access in scanning VMs","severity":"high","exploited":false,"published_at":"2026-07-14T16:17:02.593+00:00","url":"https://junglewise.ai/threats/cve-2026-59835-fortinet-fortisandbox-unauthenticated-vnc-access-in-scanning-vms"},{"cve":"CVE-2026-23573","cvss":6.1,"slug":"cve-2026-23573-fortinet-fortios-and-fortiproxy-reflected-xss-in-agentless-ssl","title":"Fortinet FortiOS and FortiProxy reflected XSS in Agentless SSL-VPN","severity":"medium","exploited":false,"published_at":"2026-07-14T16:16:51.823+00:00","url":"https://junglewise.ai/threats/cve-2026-23573-fortinet-fortios-and-fortiproxy-reflected-xss-in-agentless-ssl"},{"cve":"CVE-2025-62826","cvss":3.1,"slug":"cve-2025-62826-fortinet-fortios-and-fortiproxy-http-response-splitting-in","title":"Fortinet FortiOS and FortiProxy HTTP Response Splitting in captive portal","severity":"low","exploited":false,"published_at":"2026-07-14T16:16:42.85+00:00","url":"https://junglewise.ai/threats/cve-2025-62826-fortinet-fortios-and-fortiproxy-http-response-splitting-in"},{"cve":"CVE-2025-62675","cvss":3.4,"slug":"cve-2025-62675-fortinet-fortios-and-fortiproxy-http-response-splitting-in-web","title":"Fortinet FortiOS and FortiProxy HTTP response splitting in Web Filter","severity":"low","exploited":false,"published_at":"2026-07-14T16:16:42.617+00:00","url":"https://junglewise.ai/threats/cve-2025-62675-fortinet-fortios-and-fortiproxy-http-response-splitting-in-web"},{"cve":"CVE-2025-53379","cvss":7.5,"slug":"cve-2025-53379-fortinet-fortiauthenticator-out-of-bounds-read-in-gui","title":"Fortinet FortiAuthenticator out-of-bounds read in GUI","severity":"high","exploited":false,"published_at":"2026-07-14T16:16:42.477+00:00","url":"https://junglewise.ai/threats/cve-2025-53379-fortinet-fortiauthenticator-out-of-bounds-read-in-gui"},{"cve":"CVE-2025-43892","cvss":4.3,"slug":"cve-2025-43892-fortinet-fortios-buffer-over-read-in-redirect-response","title":"Fortinet FortiOS buffer over-read in redirect response","severity":"medium","exploited":false,"published_at":"2026-07-14T16:16:42.34+00:00","url":"https://junglewise.ai/threats/cve-2025-43892-fortinet-fortios-buffer-over-read-in-redirect-response"},{"cve":"CVE-2026-49938","cvss":6.5,"slug":"cve-2026-49938-fortinet-fortiportal-improper-access-control-in-api-endpoints","title":"Fortinet FortiPortal improper access control in API endpoints","severity":"medium","exploited":false,"published_at":"2026-06-09T16:16:43.323+00:00","url":"https://junglewise.ai/threats/cve-2026-49938-fortinet-fortiportal-improper-access-control-in-api-endpoints"},{"cve":"CVE-2026-25089","cvss":9.8,"epss":0.2339,"slug":"cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui","title":"Fortinet FortiSandbox OS command injection in Web UI","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:39.943+00:00","url":"https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui"}],"vendor":{"hub":true,"name":"Fortinet","slug":"fortinet","homepage":"https://www.fortinet.com/","description":"A multinational corporation that develops and sells cybersecurity solutions, including firewalls, endpoint security, and network security software.","url":"https://junglewise.ai/threats/vendors/fortinet"},"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":12},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":2,"exploited":0,"vulnerabilities":10},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":1,"exploited":0,"vulnerabilities":1}],"most_severe":[{"cve":"CVE-2025-64446","cvss":9.8,"epss":0.9291,"slug":"cve-2025-64446-fortinet-fortiweb-path-traversal-and-command-execution","title":"Fortinet FortiWeb path traversal and command execution","severity":"critical","exploited":true,"published_at":"2025-11-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-64446-fortinet-fortiweb-path-traversal-and-command-execution"},{"cve":"CVE-2026-35616","cvss":9.8,"epss":0.8894,"slug":"cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api","title":"Fortinet FortiClientEMS improper access control in API","severity":"critical","exploited":true,"published_at":"2026-04-04T01:16:39.72+00:00","url":"https://junglewise.ai/threats/cve-2026-35616-fortinet-forticlientems-improper-access-control-in-api"},{"cve":"CVE-2026-21643","cvss":9.8,"epss":0.6252,"slug":"cve-2026-21643-fortinet-forticlient-ems-sql-injection","title":"Fortinet FortiClient EMS SQL injection","severity":"critical","exploited":true,"published_at":"2026-04-13T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2026-21643-fortinet-forticlient-ems-sql-injection"},{"cve":"CVE-2026-39808","cvss":9.8,"epss":0.4867,"slug":"cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint","title":"Fortinet FortiSandbox OS command injection in API endpoint","severity":"critical","exploited":true,"published_at":"2026-04-14T16:16:44.86+00:00","url":"https://junglewise.ai/threats/cve-2026-39808-fortinet-fortisandbox-os-command-injection-in-api-endpoint"},{"cve":"CVE-2025-25257","cvss":9.8,"epss":0.2783,"slug":"cve-2025-25257-fortinet-fortiweb-sql-injection","title":"Fortinet FortiWeb SQL injection","severity":"critical","exploited":true,"published_at":"2025-07-18T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2025-25257-fortinet-fortiweb-sql-injection"},{"cve":"CVE-2026-25089","cvss":9.8,"epss":0.2339,"slug":"cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui","title":"Fortinet FortiSandbox OS command injection in Web UI","severity":"critical","exploited":true,"published_at":"2026-06-09T16:16:39.943+00:00","url":"https://junglewise.ai/threats/cve-2026-25089-fortinet-fortisandbox-os-command-injection-in-web-ui"},{"cve":"CVE-2025-59718","cvss":9.8,"epss":0.0949,"slug":"cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml","title":"Fortinet Multiple Products auth bypass via improper SAML signature verification","severity":"critical","exploited":true,"published_at":"2025-12-09T18:15:54.983+00:00","url":"https://junglewise.ai/threats/cve-2025-59718-fortinet-multiple-products-auth-bypass-via-improper-saml"},{"cve":"CVE-2026-24858","cvss":9.8,"epss":0.048,"slug":"cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud","title":"Fortinet Multiple Products authentication bypass in FortiCloud SSO","severity":"critical","exploited":true,"published_at":"2026-01-27T20:16:24.477+00:00","url":"https://junglewise.ai/threats/cve-2026-24858-fortinet-multiple-products-authentication-bypass-in-forticloud"},{"cve":"CVE-2024-55591","cvss":9.8,"slug":"cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass","title":"Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability","severity":"critical","exploited":true,"published_at":"2025-01-14T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-55591-fortinet-fortios-and-fortiproxy-authentication-bypass"},{"cve":"CVE-2024-47575","cvss":9.8,"slug":"cve-2024-47575-fortinet-fortimanager-missing-authentication-vulnerability","title":"Fortinet FortiManager Missing Authentication Vulnerability","severity":"critical","exploited":true,"published_at":"2024-10-23T00:00:00+00:00","url":"https://junglewise.ai/threats/cve-2024-47575-fortinet-fortimanager-missing-authentication-vulnerability"}],"generated_at":"2026-09-26T12:07:00.15149+00:00","technologies":[{"name":"Fortinet FortiOS","slug":"fortios","vulnerabilities":54,"url":"https://junglewise.ai/threats/technologies/fortios"},{"name":"Fortinet FortiProxy","slug":"fortiproxy","vulnerabilities":34,"url":"https://junglewise.ai/threats/technologies/fortiproxy"},{"name":"Fortinet FortiPAM","slug":"fortipam","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortipam"},{"name":"Fortinet Fortisase","slug":"fortisase","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortisase"},{"name":"Fortinet FortiSwitchManager","slug":"fortiswitchmanager","vulnerabilities":9,"url":"https://junglewise.ai/threats/technologies/fortiswitchmanager"},{"name":"Fortinet FortiADC","slug":"fortiadc","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortiadc"},{"name":"Fortinet FortiSandbox","slug":"fortisandbox","vulnerabilities":8,"url":"https://junglewise.ai/threats/technologies/fortisandbox"},{"name":"Fortinet FortiProxy SSL-VPN","slug":"fortiproxy-ssl-vpn","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiproxy-ssl-vpn"},{"name":"Fortinet FortiWeb","slug":"fortiweb","vulnerabilities":7,"url":"https://junglewise.ai/threats/technologies/fortiweb"},{"name":"Fortinet FortiSandbox Cloud","slug":"fortisandbox-cloud","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/fortisandbox-cloud"},{"name":"Fortinet FortiGate NGFW","slug":"fortigate-ngfw","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fortigate-ngfw"},{"name":"Fortinet FortiSandbox PaaS","slug":"fortisandbox-paas","vulnerabilities":5,"url":"https://junglewise.ai/threats/technologies/fortisandbox-paas"},{"name":"Fortinet FortiClient EMS","slug":"forticlient-ems","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/forticlient-ems"},{"name":"Fortinet FortiManager","slug":"fortimanager","vulnerabilities":4,"url":"https://junglewise.ai/threats/technologies/fortimanager"},{"name":"Fortinet FortiAnalyzer","slug":"fortianalyzer","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/fortianalyzer"},{"name":"Fortinet FortiSOAR","slug":"fortisoar","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/fortisoar"},{"name":"Fortinet FortiSOAR PaaS","slug":"fortisoar-paas","vulnerabilities":3,"url":"https://junglewise.ai/threats/technologies/fortisoar-paas"}]}