Known vulnerabilities in FortiOS

Software: FortiOS
Software CPE: cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
Total vulnerabilities: 286
Public exploits: 24
Known exploited (KEV): 21
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting FortiOS FortiOS is affected by 286 known vulnerabilities: 13 critical, 32 high, 106 medium, 135 low Critical High Medium Low

Vulnerabilities (286)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU137531 - Buffer over-read
CVE-2026-59840
CWE-126 Low
No
No
7.4.9, 7.6.4 14.07.2026 SB20260714106
#VU137532 - Buffer over-read
CVE-2025-43892
CWE-126 Low
No
No
7.4.9, 7.6.4 14.07.2026 SB20260714106
#VU137530 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2025-62826
CWE-113 Low
No
No
7.6.5 14.07.2026 SB20260714105
#VU137529 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2025-62675
CWE-113 Low
No
No
7.6.5 14.07.2026 SB2026071497
#VU137528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-59839
CWE-22 Low
No
No
7.4.10, 7.6.7 14.07.2026 SB2026071496
#VU137527 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2026-23573
CWE-79 Medium
No
No
7.6.7 14.07.2026 SB2026071494
#VU137525 - Stack-based buffer overflow
CVE-2026-59837
CWE-121 Low
No
No
7.4.2 14.07.2026 SB2026071492
#VU134005 - Internal Asset Exposed to Unsafe Debug Access Level or State
CVE-2025-67862
CWE-1244 Low
No
No
7.2.11, 7.4.8, 7.6.3 09.06.2026 SB2026060945
#VU131196 - Out-of-bounds write
CVE-2025-53844
CWE-787 Medium
No
No
7.2.12, 7.4.9, 7.6.4 12.05.2026 SB20260414124
#VU126001 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-61624
CWE-22 High
No
Exploited
7.4.10, 7.6.5 14.04.2026 SB20260414125
#VU126000 - Missing Authentication for Critical Function
CVE-2025-53847
CWE-306 Medium
No
No
7.0.18, 7.2.12, 7.4.9, 7.6.4 14.04.2026 SB20260414124
#VU122538 - Exposure of sensitive information to an unauthorized actor
CVE-2025-68686
CWE-200 High
No
Exploited
7.4.7, 7.6.2 10.02.2026 SB2026021047
#VU122537 - Use of Externally-Controlled Format String
CVE-2025-64157
CWE-134 Low
No
No
7.4.10, 7.6.5 10.02.2026 SB2026021046
#VU122536 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-55018
CWE-444 Medium
No
No
7.4.10, 7.6.1 10.02.2026 SB2026021045
#VU122535 - Improper Verification of Source of a Communication Channel
CVE-2025-62439
CWE-940 Low
No
No
7.4.10, 7.6.5 10.02.2026 SB2026021044
#VU122532 - Authentication Bypass by Primary Weakness
CVE-2026-22153
CWE-305 High
No
No
7.6.5 10.02.2026 SB2026021041
#VU121971 - Improper Verification of Cryptographic Signature
CVE-2026-24858
CWE-347 Critical
Available
Exploited
7.0.19, 7.2.13, 7.4.11, 7.6.6 23.01.2026 SB2026012392
#VU121226 - Heap-based Buffer Overflow
CVE-2025-25249
CWE-122 Critical
No
No
6.4.17, 7.0.18, 7.2.12, 7.4.9, 7.6.4 13.01.2026 SB2026011365
#VU119696 - Improper Verification of Cryptographic Signature
CVE-2025-59719
CWE-347 Critical
Available
Exploited
7.0.18, 7.2.12, 7.4.9, 7.6.4 10.12.2025 SB2025121064
#VU119694 - Improper Verification of Cryptographic Signature
CVE-2025-59718
CWE-347 Critical
Available
Exploited
7.0.18, 7.2.12, 7.4.9, 7.6.4 10.12.2025 SB2025121064


Showing elements 1 - 20 out of 286