CVE-2026-104286 - An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in F

CVE-2026-84388 - A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Ext

CVE-2026-84390 - A inclusion of sensitive information in source code vulnerability in Fortinet FortiMonitorOnSight 7.

CVE-2026-84393 - A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 thro

CVE-2026-84392 - A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all version

CVE-2026-84391 - A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allo

CVE-2026-84389 - A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiSIEM 7.5.0 thro

CVE-2026-84387 - A improper neutralization of special elements used in a command ('command injection') vulnerability

CVE-2026-84386 - A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClient

CVE-2026-84385 - A improper access control vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.6, FortiSOAR Pa

CVE-2026-26084 - A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4

CVE-2026-22575 - An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager

CVE-2026-71408 - A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 throu

CVE-2026-71407 - A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 throug

CVE-2026-70468 - A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.

CVE-2026-70467 - A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 thro

CVE-2026-70466 - A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, Forti

CVE-2026-26035 - An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through

CVE-2026-70465 - A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet F

CVE-2026-59838 - A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in For

CVE-2026-59841 - A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort

CVE-2026-59840 - A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.

CVE-2026-59839 - A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo

CVE-2026-59837 - A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all

CVE-2026-59836 - A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, Fort

CVE-2026-59835 - A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, F

CVE-2026-23573 - An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit

CVE-2025-62826 - An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili

CVE-2025-62675 - An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili

CVE-2025-53379 - A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenti

CVE-2025-43892 - A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.