fortinet fortiauthenticator

Name: fortinet fortiauthenticator
Brand: fortinet

productUS

cpe:2.3:a:fortinet:fortiauthenticator:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical6high12medium1low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-26208US	medium5.3	1.81% (79th)	Exploit	6.5.0	2023-03-09	5.4.0 → 6.5.0
CVE-2026-44277US	—	0.55% (46th)	Exploit	6.6.9	2026-05-12	4 versions
CVE-2015-1455US	high7.5	2.66% (86th)	—	no fix	2015-02-03	= 3.0.0
CVE-2015-1459US	medium4.3	2.03% (81st)	—	no fix	2015-02-03	= 3.0.0
CVE-2015-1456US	medium4.0	1.43% (73rd)	—	no fix	2015-02-03	= 3.0.0
CVE-2021-43067US	medium6.5	1.14% (66th)	—	no fix	2021-12-08	10 versions
CVE-2013-6990US	high9.0	1.09% (65th)	—	no fix	2014-04-30	≤ 2.2
CVE-2021-22124US	high7.5	1.02% (63rd)	—	6.0.6	2021-08-04	3 versions
CVE-2018-9186US	medium6.1	0.73% (54th)	—	5.3.0	2018-05-31	4.0.0 → 5.3.0
CVE-2019-16154US	medium6.1	0.70% (53rd)	—	no fix	2020-01-07	= 6.0.0
CVE-2021-26116US	high8.8	0.62% (50th)	—	6.3.1	2022-04-06	5.0.0 → 6.3.1
CVE-2021-43068US	high8.1	0.58% (48th)	—	no fix	2021-12-09	= 6.4.0
CVE-2021-24005US	high7.5OT elevated	0.56% (47th)	—	6.3.0	2021-07-06	6.0.0 → 6.3.0
CVE-2025-53379US	—	0.53% (45th)	—	no fix	2026-07-14	2 versions
CVE-2022-35850US	medium6.1	0.49% (42nd)	—	6.4.7	2023-04-11	2 versions
CVE-2015-1457US	medium4.9	0.49% (42nd)	—	no fix	2015-02-03	= 3.0.0
CVE-2022-23439US	medium6.1	0.45% (39th)	—	6.3.4	2025-01-22	2 versions
CVE-2015-1458US	medium6.9	0.45% (38th)	—	no fix	2015-02-03	= 3.0.0
CVE-2026-21743US	—OT elevated	0.38% (32nd)	—	6.6.7	2026-02-10	6.3.0 → 6.6.7
CVE-2024-23664US	medium6.1	0.35% (28th)	—	6.5.4	2024-06-03	2 versions
CVE-2021-36177US	medium4.3	0.30% (23rd)	—	6.3.3	2022-02-02	6.0.0 → 6.3.3
CVE-2022-22302US	low3.3OT elevated	0.29% (21st)	—	no fix	2023-07-11	3 versions
CVE-2025-57823US	—	0.23% (14th)	—	no fix	2025-12-09	6.3.0 → 6.6.6
CVE-2025-59923US	—	0.21% (11th)	—	no fix	2025-12-09	6.3.0 → 6.6.4

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-264CWE-2642 CVEs
CWE-284Improper Access Control2 CVEs
CWE-125Out-of-bounds Read1 CVEs
CWE-255CWE-2551 CVEs
CWE-287Improper Authentication1 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan