Fortinet FortiSOAR on-premise

Name: Fortinet FortiSOAR on-premise
Brand: Fortinet

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical3high5medium0low

updated 2026-10-27

vulnerabilities (22)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2026-84387US	—	1.40% (72nd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84392US	—	1.07% (65th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84390US	—	0.52% (44th)	—	no fix	2026-09-11	≤ vers:unknown/*
CVE-2024-48891US	high7.0	0.45% (39th)	—	no fix	2025-10-14	4 versions
CVE-2022-23439US	medium6.1	0.45% (39th)	—	no fix	2025-01-22	4 versions
CVE-2026-22573US	—	0.42% (36th)	—	no fix	2026-04-14	4 versions
CVE-2026-84391US	—	0.41% (35th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-26084US	—	0.39% (33rd)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-23708US	high8.1OT elevated	0.28% (21st)	—	no fix	2026-04-14	2 versions
CVE-2026-84393US	—	0.28% (20th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-22574US	medium6.5	0.27% (19th)	—	no fix	2026-04-14	4 versions
CVE-2025-59810US	—	0.26% (18th)	—	no fix	2025-12-09	4 versions
CVE-2026-22576US	medium6.5	0.26% (18th)	—	no fix	2026-04-14	4 versions
CVE-2026-22575US	—	0.24% (16th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2026-84385US	—	0.23% (14th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2025-59808US	—	0.23% (14th)	—	no fix	2025-12-09	4 versions
CVE-2026-22154US	medium5.4	0.22% (13th)	—	no fix	2026-04-14	4 versions
CVE-2026-84389US	—	0.22% (12th)	—	no fix	2026-09-08	≤ vers:unknown/*
CVE-2025-59809US	—	0.20% (9th)	—	no fix	2026-04-14	5 versions
CVE-2026-22155US	high7.5OT elevated	0.17% (7th)	—	no fix	2026-04-14	4 versions
CVE-2026-21742US	medium6.5OT elevated	0.15% (4th)	—	no fix	2026-04-14	4 versions
CVE-2026-84386US	—	0.14% (4th)	—	no fix	2026-09-08	≤ vers:unknown/*

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control4 CVEs
CWE-257Storing Passwords in a Recoverable Format2 CVEs
CWE-319Cleartext Transmission of Sensitive Information2 CVEs
CWE-522Insufficiently Protected Credentials2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
CWE-283Unverified Ownership1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-297Improper Validation of Certificate with Host Mismatch1 CVEs

sources (2)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)12 CVEs
NLNCSC-NL (CSAF)10 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan