Latest vulnerabilities for "fortinet fortimanager"

Fortinet FortiManagerFGFM Authentication Weakening via CLI Configuration

Risk 72

Severity

7.3

First published (updated )

Advisory

FG-IR-26-160

Fortinet FortiManagerFGFM Authentication Weakening via CLI Configuration

Risk 75

Severity

8.1

First published (updated )

CVE-2026-70468

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Risk 32

Severity

5.3

First published (updated )

CVE-2025-67604

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Risk 32

Severity

5.2

First published (updated )

Advisory

FG-IR-26-137

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Risk 66

Severity

7.2

First published (updated )

CVE-2025-61848

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-26-111

Fortinet FortiAnalyzerPath Traversal in CLI

Risk 43

Severity

5.4

First published (updated )

Advisory

FG-IR-26-120

Fortinet FortiAnalyzerPath Traversal in CLI

Risk 49

Severity

6.5

First published (updated )

CVE-2025-68649

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 20

Severity

3.7

First published (updated )

CVE-2026-22629

Fortinet FortiAnalyzerMFA Bypass in GUI

Risk 66

Severity

7.2

First published (updated )

CVE-2026-22572

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Risk 66

Severity

7.2

First published (updated )

CVE-2025-68648

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 66

Severity

7.2

First published (updated )

CVE-2025-48418

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Risk 46

Severity

6.9

First published (updated )

CVE-2025-68482

Fortinet FortiManagerBuffer overflow via fgtupdates service

Risk 75

Severity

8.1

First published (updated )

CVE-2025-54820

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Risk 59

Severity

6.4

First published (updated )

Advisory

FG-IR-26-081

Fortinet FortiAnalyzerMFA Bypass in GUI

Risk 65

Severity

6.8

First published (updated )

Advisory

FG-IR-26-090

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Risk 19

Severity

3.4

First published (updated )

Advisory

FG-IR-26-079

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Risk 44

Severity

6.3

First published (updated )

Advisory

FG-IR-26-078

Fortinet FortiManagerBuffer overflow via fgtupdates service

Risk 71

Severity

7

First published (updated )

Advisory

FG-IR-26-098

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Risk 64

Severity

6.5

First published (updated )

Advisory

FG-IR-26-092

The RegisterFortinet unearths another critical bug as SSO accounts borked post-patch

Exploited

Zeroday

First published (updated )

News

The Register

BleepingComputerFortinet blocks exploited FortiCloud SSO zero day until patch is ready

Exploited

Zeroday

First published (updated )

News

BleepingComputer

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 80

Severity

9.8

Exploited

EPSS

2.42%

First published (updated )

CVE-2026-24858

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Risk 85

Severity

9.4

First published (updated )

Advisory

FG-IR-26-060

Fortinet FortiOSPrivate key readable by admin

Risk 32

Severity

6

First published (updated )

CVE-2024-40593

Fortinet FortiAnalyzerPrivate key readable by admin

Risk 31

Severity

5.9

First published (updated )

Advisory

FG-IR-24-133

Fortinet FortiProxyHeap Overflow in fgfmsd

Risk 66

Severity

7.2

First published (updated )

CVE-2024-50571

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Risk 22

Severity

4.3

First published (updated )

CVE-2024-47569

Fortinet FortiManagerUnauthorized modification of global threat feeds

Risk 22

Severity

4.3

First published (updated )

CVE-2024-54020

Fortinet FortiManagerUnauthorized modification of global threat feeds

Risk 13

Severity

2.1

First published (updated )

Advisory

FG-IR-24-023

Trending

Versions

Fortinet FortiManagerFGFM Authentication Weakening via CLI Configuration

Fortinet FortiManagerFGFM Authentication Weakening via CLI Configuration

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Fortinet FortiAnalyzerDoS due to unsafe function in signal handler

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerSQL Injection via JSON RPC API

Fortinet FortiAnalyzerPath Traversal in CLI

Fortinet FortiAnalyzerPath Traversal in CLI

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiAnalyzerMFA Bypass in GUI

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Fortinet FortiManagerBuffer overflow via fgtupdates service

Fortinet FortiAnalyzerPrivilege escalation using undocumented CLI command

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerMFA Bypass in GUI

Fortinet FortiAnalyzerAuthentication Lockout Bypass via Race Condition

Fortinet FortiAnalyzerLack of TLS Certificate Validation during initial SSO Authentication

Fortinet FortiManagerBuffer overflow via fgtupdates service

Fortinet FortiAnalyzerFormat string vulnerability in fazsvcd

Don't miss critical vulnerabilities

The RegisterFortinet unearths another critical bug as SSO accounts borked post-patch

BleepingComputerFortinet blocks exploited FortiCloud SSO zero day until patch is ready

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Fortinet FortiAnalyzerAdministrative FortiCloud SSO authentication bypass

Fortinet FortiOSPrivate key readable by admin

Don't miss critical vulnerabilities

Fortinet FortiAnalyzerPrivate key readable by admin

Fortinet FortiProxyHeap Overflow in fgfmsd

Fortinet FortiOSInsertion of Sensitive Information Into Sent Data Vulnerability in csfd daemon

Fortinet FortiManagerUnauthorized modification of global threat feeds

Fortinet FortiManagerUnauthorized modification of global threat feeds

Don't miss critical vulnerabilities

Company

Resources

Contact