SecAlerts
f

fortinet

Security Risk Profile

52
/100
medium

Security Risk Score

Comprehensive risk assessment based on 1000 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from April 11, 2023 to present

1000
Total CVEs
400
Critical+High
56
Exploited
67
Unpatched

Threat Assessment

Avg CVSS
6.8
Base severity
Avg EPSS
4%
Exploit probability
Unpatched
67
Critical/High
Risk Level
52/100
medium
⚠️ 56 Active Exploits⚡ 34 Zero-Days📈 28 in Last 30 Days

Severity Distribution

Critical
101
High
299
Medium
404
Low
58

Exploit Likelihood

>50% chance
1
20-50%
1
5-20%
0
<5%
23

Age Distribution

Common Weaknesses (CWE)

1
Command Injection
88
2
OS Command Injection
86
3
Path Traversal
70
4
Buffer Overflow
68
5
XSS
52

Most Affected Products

1. Fortinet FortiOS1463
2. Fortinet FortiManager862
3. Fortinet FortiProxy805
4. Fortinet FortiAnalyzer635
5. Fortinet FortiSandbox484

Recent Vulnerabilities

See more →
https://reddit.com/r/netsec/comments/1xardr3/cve2026106173_deepdive_fortinet_fortisiem_grpc/
unknown

CVE-2026-106173 Deep-Dive: Fortinet FortiSIEM gRPC Path Traversal File Write to RCE

Oct 20, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1x9cq73/weekly_home_lab_exploits/
unknown

Weekly home lab exploits

Oct 18, 2026🔧 No Patch
https://reddit.com/r/Malware/comments/1x8byog/unit_42_uncovers_peerstitch_a_stealthy_fortigate/
unknown

Unit 42 Uncovers PEERSTITCH, a Stealthy FortiGate Implant

Oct 17, 2026🔧 No Patch
https://reddit.com/r/sysadmin/comments/1x7o34b/if_cisco_or_insert_your_vendor_here_releases_a_98/
unknown

If, Cisco [or insert your vendor here] releases a 9.8 CVE, nobody panics, because it's all 'part of the plan.' But when I say that Fortinet has one, well then everyone loses their minds!" -Joker who works in InfoSec

Oct 16, 2026🔧 No Patch
ZDI-26-771
unknown

Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

Oct 15, 2026🔧 No Patch
ZDI-CAN-31870
unknown

ZDI-26-771: Fortinet FortiSandbox login_user_profile Hard-Coded Credentials Authentication Bypass Vulnerability

Oct 15, 2026🔧 No Patch
ZDI-26-772
unknown

Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

Oct 15, 2026🔧 No Patch
ZDI-CAN-31871
unknown

ZDI-26-772: Fortinet FortiSandbox Admin Profile Improper Handling of Exceptional Conditions Denial-of-Service Vulnerability

Oct 15, 2026🔧 No Patch
CVE-2025-57739
CVSS 8.8high
Oct 13, 2026🔧 No Patch
CVE-2026-106173
CVSS 9.8critical
Oct 13, 2026🔧 No Patch

Monitor fortinet in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.