Fortinet FortiADC
productEUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
0
KEV-listed
by severity
1critical15high15medium1low
updated 2026-10-27
01
vulnerabilities (40)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2025-25256US | — | Exploit |
| CVE-2025-52970US | — | Exploit |
| CVE-2022-39947US | high8.8 | — |
| CVE-2023-25607US | high7.8 | — |
| CVE-2025-49813US | — | — |
| CVE-2025-31104US | — | — |
| CVE-2021-36193US | high7.2 | — |
| CVE-2022-33876US | medium6.5 | — |
| CVE-2022-33875US | high8.8 | — |
| CVE-2024-26009US | high8.1OT elevated | — |
| CVE-2025-53744US | — | — |
| CVE-2022-43948US | high7.8 | — |
| CVE-2023-26205US | high8.8 | — |
| CVE-2022-27482US | high7.8 | — |
| CVE-2021-43076US | medium6.5 | — |
| CVE-2021-42757US | medium6.7 | — |
| CVE-2023-27999US | high7.8 | — |
| CVE-2025-25248US | medium6.5 | — |
| CVE-2025-47857US | — | — |
| CVE-2023-26210US | high7.8 | — |
| CVE-2022-35849US | high8.8 | — |
| CVE-2022-23439US | medium6.1 | — |
| CVE-2023-25603US | critical9.1 | — |
| CVE-2022-43952US | medium5.4 | — |
| CVE-2025-48839US | — | — |
| CVE-2023-41673US | medium5.4 | — |
| CVE-2024-36511US | low3.7 | — |
| CVE-2023-50181US | medium6.5 | — |
| CVE-2023-37933US | medium6.1 | — |
| CVE-2025-59921US | — | — |
| CVE-2023-50180US | medium5.5 | — |
| CVE-2025-54971US | medium6.5 | — |
| CVE-2023-29177US | medium6.7 | — |
| CVE-2022-40679US | high7.8 | — |
| CVE-2023-27993US | high7.1 | — |
| CVE-2023-28000US | high7.8 | — |
| CVE-2023-50178US | high7.4 | — |
| CVE-2025-58412US | medium6.1 | — |
| CVE-2023-50179US | medium5.9 | — |
| CVE-2025-32766US | medium6.7 | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')13 CVEs
- CWE-121Stack-based Buffer Overflow3 CVEs
- CWE-787Out-of-bounds Write3 CVEs
- CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-284Improper Access Control2 CVEs
- CWE-295Improper Certificate Validation2 CVEs
- CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
03
sources (2)
Which sources assert this record, and when.
- EUEU Vulnerability Database (ENISA)33 CVEs
- NLNCSC-NL (CSAF)8 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan