Known vulnerabilities in FortiDDoS-F

Vendor: Fortinet, Inc
Software: FortiDDoS-F
Software CPE: cpe:2.3:a:fortinet:fortiddos-f:*:*:*:*:*:*:*:*
Website: https://www.fortinet.com/
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiDDoS-F FortiDDoS-F is affected by 7 known vulnerabilities: 1 high, 3 medium, 3 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126117 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2026-39815		 CWE-89 Medium
No
No
 7.2.3 15.04.2026 SB2026041520
#VU115080 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-45325		 CWE-78 Low
No
No
 7.0.3 09.09.2025 SB2025090981
#VU104034 - Improper input validation
CVE-2025-26466		 CWE-20 Medium
Available
No
 7.0.5 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU96012 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-27486		 CWE-78 Low
No
No
 6.4.2, 6.5.1 14.08.2024 SB2024081470
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 7.0.2 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU83296 - Memory corruption
CVE-2023-29177		 CWE-119 Low
No
No
 6.4.2, 6.5.1 20.11.2023 SB2023112036
#VU83294 - Overly Permissive Cross-domain Whitelist
CVE-2023-25603		 CWE-942 Medium
No
No
 6.4.2, 6.5.0 20.11.2023 SB2023112035