Fortinet
Number 26 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
1,023
Critical
66
High
249
Known Exploited
31
Exploit available
12
Visible in Bangladesh
468
Services seen by internet scanning
Network, no login needed
31.2%
Of 921 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 130 | 17 | 21 | 76 | 16 | 0 |
| 2025 | 237 | 13 | 46 | 142 | 36 | 0 |
| 2024 | 121 | 10 | 33 | 65 | 13 | 0 |
| 2023 | 198 | 14 | 68 | 96 | 20 | 0 |
| 2022 | 100 | 7 | 35 | 48 | 10 | 0 |
| 2021 | 123 | 3 | 42 | 69 | 5 | 4 |
| 2020 | 30 | 0 | 2 | 5 | 0 | 23 |
| 2019 | 33 | 2 | 2 | 5 | 0 | 24 |
| 2018 | 17 | 0 | 0 | 0 | 0 | 17 |
| 2017 | 34 | 0 | 0 | 0 | 0 | 34 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| FortiOS | 132 | 26 |
| FortiWeb | 65 | 19 |
| FortiManager | 49 | 16 |
| FortiSandbox | 49 | 22 |
| Fortinet FortiOS | 46 | 5 |
| FortiAnalyzer | 38 | 3 |
| FortiProxy | 31 | 9 |
| Fortinet FortiWeb | 30 | 11 |
| FortiClientWindows | 26 | 13 |
| FortiSIEM | 26 | 10 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Execute unauthorized code or commands | 98 | 33 |
| Command Injection | 84 | 48 |
| Improper access control | 70 | 17 |
| Information disclosure | 64 | 6 |
| Memory Corruption | 50 | 18 |
| Cross-Site Scripting | 48 | 11 |
| Path Traversal | 35 | 11 |
| Improper Access Control | 33 | 11 |
| Information Disclosure | 33 | 3 |
| SQL Injection | 31 | 9 |
Known to be attacked
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-104286 | Fortinet FortiMail: Path Traversal | Critical | 4.6% | |
| CVE-2026-25089 | Fortinet FortiSandbox: Command Injection | Critical | 76.1% | |
| CVE-2026-39808 | Fortinet FortiSandbox: Command Injection | Critical | 93.2% | |
| CVE-2025-61624 | Fortinet FortiOS: Path Traversal | Medium | 1.3% | |
| CVE-2026-35616 | Fortinet FortiClientEMS: Improper Access Control | Critical | 94.0% | |
| CVE-2025-68686 | Fortinet FortiOS: Information Disclosure | Medium | 29.5% | |
| CVE-2026-21643 | Fortinet FortiClientEMS: SQL Injection | Critical | 97.7% | |
| CVE-2026-24858 | Fortinet FortiWeb: Authentication Issues | Critical | 86.6% | |
| CVE-2025-25249 | Fortinet FortiSwitchManager: Memory Corruption | High | 3.7% | |
| CVE-2025-59718 | Fortinet FortiSwitchManager vulnerability | Critical | 68.1% |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2026-26248 | Fortinet FortiSandbox: Cross-Site Scripting | High | n/a | |
| CVE-2026-126261 | Fortinet FortiManager vulnerability | Critical | n/a | |
| CVE-2026-121530 | Fortinet FortiOS: Authentication Issues | Medium | n/a | |
| CVE-2026-121529 | Fortinet FortiClientMac vulnerability | Critical | n/a | |
| CVE-2025-61625 | Fortinet FortiManager: Path Traversal | High | n/a | |
| CVE-2026-106174 | Fortinet FortiOS vulnerability | Medium | 0.3% | |
| CVE-2026-107656 | Fortinet FortiSandbox: Authentication Issues | Critical | 0.9% | |
| CVE-2026-23707 | Fortinet FortiManager Cloud: SQL Injection | Medium | 0.3% | |
| CVE-2026-23706 | Fortinet FortiAnalyzer Cloud: SQL Injection | Medium | 0.3% | |
| CVE-2026-23705 | Fortinet FortiAnalyzer: SQL Injection | Medium | 0.3% |