CVE Tools
Track your stack

Fortinet

1,084 CVEs tracked since 2005. Since Jan 2021, 17 of them reached CISA KEV.

Fortinet CVEs per month

Jan 2021 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Fortinet CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2021-0150
2021-0220
2021-03no snapshot
2021-0430
2021-052 or fewer
2021-0660
2021-07160
2021-08180
2021-0970
2021-1060
2021-11200
2021-12390
2022-012 or fewer
2022-0280
2022-03110
2022-04160
2022-0590
2022-063 or fewer
2022-07150
2022-0830
2022-09100
2022-1091
2022-11170
2022-1260
2023-0161
2023-02380
2023-03no snapshot
2023-04200
2023-0590
2023-06211
2023-0770
2023-084 or fewer
2023-09140
2023-10360
2023-11170
2023-12130
2024-0150
2024-02122
2024-0391
2024-04120
2024-05120
2024-06160
2024-07110
2024-0850
2024-09100
2024-104 or fewer
2024-11170
2024-12100
2025-01521
2025-02151
2025-03440
2025-04120
2025-05101
2025-06130
2025-0771
2025-08140
2025-094 or fewer
2025-10320
2025-11182
2025-12181
2026-0171
2026-02101
2026-03220
2026-04281
2026-05110
2026-067 or fewer
2026-07120
2026-088 or fewer
2026-09110
2026-10141
2026-110

Products

The products that kept showing up in Fortinet's monthly top three, with their CVEs summed over those months.

  1. Fortios16935 months
  2. Fortiweb7111 months
  3. Fortiproxy6917 months
  4. Fortimanager6014 months
  5. Fortianalyzer369 months
  6. Fortisandbox318 months
  7. Fortiadc209 months
  8. Forticlient207 months
  9. Fortinet Fortiweb183 months
  10. Fortipam186 months

Latest CVEs

The 15 most recently published vulnerabilities affecting Fortinet.

  1. CVE-2026-106174A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the H...7.5
  2. CVE-2026-107656An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox...9.8
  3. CVE-2026-106175A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7...2.3
  4. CVE-2026-106172A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.0.4 through 5...5.3
  5. CVE-2026-23707An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 throu...7.2
  6. CVE-2026-23705An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 throu...7.2
  7. CVE-2026-23706An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.1 throu...6.5
  8. CVE-2025-46773An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 throu...8.8
  9. CVE-2025-57739An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.3, FortiMail 7.4.0 through 7.4.5...8.8
  10. CVE-2026-106170An Uncaught Exception vulnerability [CWE-248] vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions may allow a privileged att...4.9
  11. CVE-2026-106173A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via specially ...9.8
  12. CVE-2026-106176A missing authorization vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized code or commands via Specially crafted HTTP requests3.8
  13. CVE-2026-106171A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.6, FortiManager Cloud 7.6.2...6.1
  14. CVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4...9.8
  15. CVE-2026-84388A improper restriction of rendered ui layers or frames vulnerability in Fortinet FortiPAM Chrome Extension 8.0 all versions may allow attacker to information disclosure via remote unauthenticated a...9.6

The record

Peak rank
#12 in Mar 2012
Busiest month shown
Jan 2025, 52 CVEs
Months with a KEV entry
15 since Jan 2021
Monthly snapshots
118 since 2005
Fortinet's full record, month by month