Fortinet FortiOS

productDE

cpe:/o:fortinet:fortios:-

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

12critical16high23medium2low

updated 2026-10-27

vulnerabilities (56)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2024-6387US	high8.1	99.5% (100th)	Exploit	no fix	2024-07-01	≤ vers:unknown/unknown
CVE-2016-2183US	high7.5OT high	94.7% (100th)	Exploit	no fix	2016-09-01	—
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	≤ vers:unknown/unknown
CVE-2025-26466US	medium5.9	38.7% (99th)	Exploit	no fix	2025-02-28	≤ vers:unknown/unknown
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	—
CVE-2016-2177US	critical9.8	44.5% (99th)	—	no fix	2016-06-20	—
CVE-2016-2182US	critical9.8	44.2% (99th)	—	no fix	2016-09-16	—
CVE-2016-6306US	medium5.9	41.7% (99th)	—	no fix	2016-09-26	—
CVE-2016-6303US	critical9.8	32.0% (98th)	—	no fix	2016-09-16	—
CVE-2016-2180US	high7.5	30.0% (98th)	—	no fix	2016-08-01	—
CVE-2016-6302US	high7.5	27.8% (98th)	—	no fix	2016-09-16	—
CVE-2016-2179US	high7.5	26.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-2181US	high7.5	22.6% (98th)	—	no fix	2016-09-16	—
CVE-2016-6305US	high7.5	16.0% (97th)	—	no fix	2016-09-26	—
CVE-2024-48884US	critical9.1	15.2% (97th)	—	no fix	2025-01-14	—
CVE-2016-6307US	medium5.9	13.8% (97th)	—	no fix	2016-09-26	—
CVE-2016-6308US	medium5.9	12.2% (96th)	—	no fix	2016-09-26	—
CVE-2019-3855US	high8.8	9.29% (95th)	—	no fix	2019-03-21	—
CVE-2019-3862US	critical9.1	7.90% (95th)	—	no fix	2019-03-21	—
CVE-2019-3858US	critical9.1	6.45% (94th)	—	no fix	2019-03-21	—
CVE-2019-3859US	critical9.1	6.28% (94th)	—	no fix	2019-03-21	—
CVE-2019-3857US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3856US	high8.8	6.13% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3860US	critical9.1	5.42% (93rd)	—	no fix	2019-03-25	—
CVE-2019-3861US	critical9.1	5.12% (92nd)	—	no fix	2019-03-25	—
CVE-2017-13082US	high8.1OT elevated	4.58% (92nd)	—	no fix	2017-10-17	—
CVE-2019-3863US	high8.8	3.44% (89th)	—	no fix	2019-03-25	—
CVE-2017-13080US	medium5.3OT elevated	2.28% (83rd)	—	no fix	2017-10-17	—
CVE-2017-13084US	medium6.8OT elevated	2.21% (82nd)	—	no fix	2017-10-17	—
CVE-2017-13079US	medium5.3OT elevated	2.12% (82nd)	—	no fix	2017-10-17	—
CVE-2017-13086US	medium6.8OT elevated	2.05% (81st)	—	no fix	2017-10-17	—
CVE-2017-13081US	medium5.3OT elevated	1.98% (80th)	—	no fix	2017-10-17	—
CVE-2017-13088US	medium5.3OT elevated	1.81% (78th)	—	no fix	2017-10-17	—
CVE-2017-13087US	medium5.3OT elevated	1.74% (78th)	—	no fix	2017-10-17	—
CVE-2023-42788US	medium6.7	1.55% (75th)	—	no fix	2023-10-10	≤ vers:unknown/unknown
CVE-2016-2178US	medium5.5	1.24% (69th)	—	no fix	2016-06-20	—
CVE-2024-46668US	high7.5	0.99% (62nd)	—	no fix	2025-01-14	—
CVE-2025-22252US	high7.2OT elevated	0.95% (61st)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2023-46715US	medium4.3	0.93% (60th)	—	no fix	2025-01-14	—
CVE-2023-42786US	medium6.5	0.91% (60th)	—	no fix	2025-01-14	—
CVE-2025-47294US	medium5.3	0.87% (59th)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2024-48885US	critical9.1	0.83% (57th)	—	no fix	2025-01-16	—
CVE-2025-47295US	low3.7	0.82% (57th)	—	no fix	2025-05-28	≤ vers:unknown/unknown
CVE-2024-52963US	medium5.9	0.80% (56th)	—	no fix	2025-01-14	—
CVE-2024-54021US	medium5.8	0.76% (55th)	—	no fix	2025-01-14	—
CVE-2024-36504US	—	0.75% (55th)	—	no fix	2025-01-14	—
CVE-2023-42785US	medium6.5	0.74% (55th)	—	no fix	2025-01-14	—
CVE-2024-45324US	—	0.73% (54th)	—	no fix	2025-03-11	≤ vers:unknown/unknown
CVE-2024-46666US	—	0.69% (53rd)	—	no fix	2025-01-14	—
CVE-2024-46670US	high7.5	0.63% (50th)	—	no fix	2025-01-14	—

showing 50 of 56

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read11 CVEs
CWE-320CWE-3208 CVEs
CWE-322Key Exchange without Entity Authentication8 CVEs
CWE-323Reusing a Nonce, Key Pair in Encryption8 CVEs
CWE-330Use of Insufficiently Random Values8 CVEs
CWE-190Integer Overflow or Wraparound7 CVEs
CWE-787Out-of-bounds Write7 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency6 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)47 CVEs
NLNCSC-NL (CSAF)9 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan