Fortinet Inc. FortiOS

Name: Fortinet Inc. FortiOS
Brand: Fortinet Inc.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

22critical66high112medium7low

updated 2026-10-25

vulnerabilities (257)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-13379US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2019-06-04	3 versions
CVE-2022-40684US	critical9.8OT critical	100.0% (100th)	KEV	no fix	2022-10-18	2 versions
CVE-2022-42475US	critical9.8OT critical	99.5% (100th)	KEV	no fix	2023-01-02	9 versions
CVE-2024-55591US	critical9.8OT critical	94.3% (100th)	KEV	no fix	2025-01-14	7.0.0 → 7.0.17
CVE-2026-24858US	—OT critical	85.8% (100th)	KEV	no fix	2026-01-27	4 versions
CVE-2023-27997US	critical9.8OT critical	85.7% (100th)	KEV	no fix	2023-06-13	5 versions
CVE-2024-21762US	critical9.8OT critical	83.4% (100th)	KEV	no fix	2024-02-09	6 versions
CVE-2018-13382US	high7.5OT critical	81.7% (100th)	KEV	no fix	2019-06-04	3 versions
CVE-2025-59718US	—OT critical	68.3% (99th)	KEV	no fix	2025-12-09	4 versions
CVE-2024-23113US	critical9.8OT critical	61.7% (99th)	KEV	no fix	2024-02-15	3 versions
CVE-2018-13374US	medium4.3OT critical	38.1% (99th)	KEV	no fix	2019-01-22	≤ 6.0.2
CVE-2019-5591US	medium6.5OT critical	18.6% (97th)	KEV	no fix	2020-08-14	≤ 6.2.0
CVE-2025-24472US	—OT critical	7.23% (94th)	KEV	no fix	2025-02-11	≤ 7.0.17
CVE-2019-6693US	medium6.5OT critical	6.64% (94th)	KEV	no fix	2019-11-21	3 versions
CVE-2021-44168US	high7.8OT critical	0.86% (58th)	KEV	no fix	2022-01-04	4 versions
CVE-2020-12812US	critical9.8OT critical	45.4% (99th)	KEV	no fix	2020-07-24	3 versions
CVE-2018-13383US	medium6.5OT critical	33.6% (98th)	KEV	no fix	2019-05-29	≤ 6.0.5
CVE-2025-68686US	—OT critical	29.5% (98th)	KEV	no fix	2026-02-10	5 versions
CVE-2022-41328US	high7.1OT critical	10.7% (96th)	KEV	no fix	2023-03-07	5 versions
CVE-2025-25249US	critical9.8OT critical	3.80% (90th)	KEV	no fix	2026-01-13	5 versions
CVE-2025-61624US	medium6.5OT critical	1.08% (65th)	KEV	no fix	2026-04-14	5 versions
CVE-2016-1909US	critical9.8	71.3% (99th)	Exploit	no fix	2016-01-15	4 versions
CVE-2016-6909US	critical9.8	49.9% (99th)	Exploit	no fix	2016-08-24	3 versions
CVE-2023-25610US	—	18.3% (97th)	Exploit	no fix	2025-03-24	4 versions
CVE-2017-3133US	medium6.1	10.7% (96th)	Exploit	no fix	2017-09-12	≤ 5.6.0
CVE-2017-3132US	medium6.1	8.11% (95th)	Exploit	no fix	2017-09-12	≤ 5.6.0
CVE-2017-3131US	medium5.4	7.68% (95th)	Exploit	no fix	2017-09-12	2 versions
CVE-2024-21754US	medium4.4	3.47% (89th)	Exploit	no fix	2024-06-11	4 versions
CVE-2023-42789US	critical9.8	3.31% (88th)	Exploit	no fix	2024-03-12	5 versions
CVE-2013-1414US	medium5.1	2.29% (83rd)	Exploit	no fix	2013-07-08	2 versions
CVE-2024-50562US	—	1.16% (67th)	Exploit	no fix	2025-06-10	7 versions
CVE-2017-14187US	medium6.2	0.45% (38th)	Exploit	no fix	2018-05-24	3 versions
CVE-2018-13380US	medium6.1	62.5% (99th)	—	no fix	2019-06-04	4 versions
CVE-2025-59719US	—OT critical	29.2% (98th)	—	no fix	2025-12-09	4 versions
CVE-2022-38380US	medium4.3	23.0% (98th)	—	no fix	2022-11-02	3 versions
CVE-2024-48884US	critical9.1	15.2% (97th)	—	no fix	2025-01-14	5 versions
CVE-2015-1880US	medium4.3	14.2% (97th)	—	no fix	2015-05-12	5.2.0 → 5.2.2
CVE-2016-3978US	medium6.1	5.94% (93rd)	—	no fix	2016-04-08	2 versions
CVE-2014-2216US	high7.5	5.14% (92nd)	—	no fix	2014-08-25	2 versions
CVE-2017-14186US	medium5.4	3.72% (90th)	—	no fix	2017-11-29	4 versions
CVE-2015-7361US	high9.3	3.40% (89th)	—	no fix	2015-10-15	≤ 5.2.3
CVE-2023-29180US	high7.5	2.61% (85th)	—	no fix	2024-02-22	5 versions
CVE-2023-29179US	medium6.5	2.45% (84th)	—	no fix	2024-02-22	3 versions
CVE-2019-17657US	high7.5	2.44% (84th)	—	no fix	2020-04-07	≤ 6.2.2
CVE-2013-7182US	medium4.3	2.41% (84th)	—	no fix	2014-02-04	≤ 5.0.5
CVE-2013-7181US	medium4.3	2.41% (84th)	—	no fix	2014-02-04	≤ 5.0.3
CVE-2018-9185US	high8.1	2.12% (82nd)	—	no fix	2018-07-05	2 versions
CVE-2023-33308US	critical9.8	2.12% (82nd)	—	no fix	2023-07-26	2 versions
CVE-2018-13376US	high7.5	2.12% (82nd)	—	no fix	2018-11-27	3 versions
CVE-2015-5965US	medium5.0	2.09% (81st)	—	no fix	2015-08-11	4.3.0 → 4.3.12

showing 50 of 257

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')30 CVEs
CWE-787Out-of-bounds Write23 CVEs
CWE-121Stack-based Buffer Overflow16 CVEs
CWE-20Improper Input Validation12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor12 CVEs
CWE-134Use of Externally-Controlled Format String11 CVEs
CWE-122Heap-based Buffer Overflow10 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')10 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)240 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan