Vulnerabilities in FortiOS, FortiGate, and FortiProxy — the firewall and SSL-VPN appliances that sit at the network edge, making a single auth-bypass or overflow bug a direct path to full network compromise. Combined article + CVE feed for the Fortinet beat.https://0daynews.com/en-ushttps://0daynews.com/cve/cve-2018-13374/https://0daynews.com/cve/cve-2018-13374/Fortinet FortiOS and FortiADC contain an improper access control vulnerability that allows attackers to obtain the LDAP server login credentials configured in FortiGate by pointing a LDAP server connectivity test request to a rogue LDAP server.Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2018-13379/https://0daynews.com/cve/cve-2018-13379/Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2018-13382/https://0daynews.com/cve/cve-2018-13382/An Improper Authorization vulnerability in Fortinet FortiOS and FortiProxy under SSL VPN web portal allows an unauthenticated attacker to modify the password.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2018-13383/https://0daynews.com/cve/cve-2018-13383/A heap buffer overflow in Fortinet FortiOS and FortiProxy may cause the SSL VPN web service termination for logged in users.Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2019-5591/https://0daynews.com/cve/cve-2019-5591/Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2019-6693/https://0daynews.com/cve/cve-2019-6693/Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2020-12812/https://0daynews.com/cve/cve-2020-12812/Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2021-44168/https://0daynews.com/cve/cve-2021-44168/Fortinet FortiOS "execute restore src-vis" downloads code without integrity checking, allowing an attacker to arbitrarily download files.Fri, 14 Aug 2026 00:00:00 GMTFortinetlowcvehttps://0daynews.com/cve/cve-2022-40684/https://0daynews.com/cve/cve-2022-40684/An authentication-bypass vulnerability in FortiOS, FortiProxy, and FortiSwitchManager allows a remote attacker to perform administrative operations on the management interface via crafted HTTP(S) requests, including adding a new administrator SSH key for persistent access.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2022-41328/https://0daynews.com/cve/cve-2022-41328/Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2022-42475/https://0daynews.com/cve/cve-2022-42475/Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2023-27997/https://0daynews.com/cve/cve-2023-27997/Fortinet FortiOS and FortiProxy SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute code or commands via specifically crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2023-48788/https://0daynews.com/cve/cve-2023-48788/Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2024-21762/https://0daynews.com/cve/cve-2024-21762/Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2024-23113/https://0daynews.com/cve/cve-2024-23113/Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2024-47575/https://0daynews.com/cve/cve-2024-47575/Fortinet FortiManager contains a missing authentication vulnerability in the fgfmd daemon that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2024-55591/https://0daynews.com/cve/cve-2024-55591/Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that may allow an unauthenticated, remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2025-24472/https://0daynews.com/cve/cve-2025-24472/ Fortinet FortiOS and FortiProxy contain an authentication bypass vulnerability that allows a remote attacker to gain super-admin privileges via crafted CSF proxy requests.Fri, 14 Aug 2026 00:00:00 GMTFortinethighcvehttps://0daynews.com/cve/cve-2025-25257/https://0daynews.com/cve/cve-2025-25257/Fortinet FortiWeb contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPs requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2025-32756/https://0daynews.com/cve/cve-2025-32756/Fortinet FortiFone, FortiVoice, FortiNDR and FortiMail contain a stack-based overflow vulnerability that may allow a remote unauthenticated attacker to execute arbitrary code or commands via crafted HTTP requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2025-58034/https://0daynews.com/cve/cve-2025-58034/Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands.Fri, 14 Aug 2026 00:00:00 GMTFortinethighcvehttps://0daynews.com/cve/cve-2025-59718/https://0daynews.com/cve/cve-2025-59718/Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. Please be aware that CVE-2025-59719 pertains to the same problem and is mentioned in the same vendor advisory. Ensure to apply all patches mentioned in the advisory.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2025-64446/https://0daynews.com/cve/cve-2025-64446/Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2025-68686/https://0daynews.com/cve/cve-2025-68686/FortiOS 7.0–7.6 patch bypass restores symbolic link persistence on already-compromised devices via crafted HTTP requests. Added to CISA KEV July 2026.Fri, 14 Aug 2026 00:00:00 GMTFortinetmediumcvehttps://0daynews.com/cve/cve-2026-21643/https://0daynews.com/cve/cve-2026-21643/Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-24858/https://0daynews.com/cve/cve-2026-24858/Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those devices.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-25089/https://0daynews.com/cve/cve-2026-25089/An unauthenticated OS command injection across FortiSandbox 4.2, 4.4, 5.0, plus FortiSandbox Cloud and PaaS 5.0 lets a network attacker run arbitrary commands via crafted HTTP requests. CVSS 9.8; CISA-listed KEV.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-26035/https://0daynews.com/cve/cve-2026-26035/An improper authentication flaw in FortiWeb lets remote unauthenticated attackers log in with any credentials. Affects versions 7.0.x through 8.0.x; patch available.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-35616/https://0daynews.com/cve/cve-2026-35616/Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-39808/https://0daynews.com/cve/cve-2026-39808/An unauthenticated OS command injection in Fortinet FortiSandbox 4.4.0–4.4.8 and a range of FortiSandbox PaaS builds lets a network attacker run arbitrary commands via crafted HTTP requests. CVSS 9.8; CISA-listed KEV.Fri, 14 Aug 2026 00:00:00 GMTFortinetcriticalcvehttps://0daynews.com/cve/cve-2026-70468/https://0daynews.com/cve/cve-2026-70468/Authentication bypass in FortiManager 7.2.5 through 7.6.1 (and cloud variants) allows unauthorized access to the central management plane. CVSS 8.1, patch available.Fri, 14 Aug 2026 00:00:00 GMTFortinethighcvehttps://0daynews.com/articles/2026-08-13-fortinet-fortiweb-fortimanager-aug-patches/https://0daynews.com/articles/2026-08-13-fortinet-fortiweb-fortimanager-aug-patches/CVE-2026-26035 in FortiWeb lets unauthenticated attackers log in with any credentials — CVSS 9.8. FortiManager also gets a CVSS 8.1 auth bypass fix this cycle.Thu, 13 Aug 2026 10:00:00 GMTFortinetarticlehttps://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/https://0daynews.com/articles/2026-07-27-fortinet-forios-cve-2025-68686-kev/CISA added CVE-2025-68686 to KEV today — a FortiOS patch bypass that lets attackers restore persistence after an initial compromise. Affects 7.0 through 7.6.Mon, 27 Jul 2026 20:00:00 GMTFortinetarticlehttps://0daynews.com/articles/2026-07-16-fortinet-fortisandbox-cve-2026-39808-25089-kev-unauth-rce/https://0daynews.com/articles/2026-07-16-fortinet-fortisandbox-cve-2026-39808-25089-kev-unauth-rce/CISA added CVE-2026-39808 and CVE-2026-25089 to KEV today — unauthenticated OS command injection in Fortinet FortiSandbox, CVSS 9.8 each, federal BOD 26-04 deadline this Sunday.Thu, 16 Jul 2026 19:15:00 GMTFortinetarticlehttps://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/https://0daynews.com/articles/2026-07-03-fortios-fortiproxy-auth-bypass-cve-2022-40684/CVE-2022-40684 let attackers bypass authentication on FortiOS and FortiProxy management interfaces and plant persistent SSH keys — Fortinet quietly warned targeted customers before public disclosure.Fri, 03 Jul 2026 13:00:00 GMTFortinetarticle