fortinet fortios
productUScpe:2.3:a:fortinet:fortios:*:*:*:*:*:*:*:*
A product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
3critical2high2medium1low
updated 2026-10-27
01
vulnerabilities (15)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2024-55591US | critical9.8OT critical | KEV |
| CVE-2024-21762US | critical9.8OT critical | KEV |
| CVE-2025-24472US | —OT critical | KEV |
| CVE-2024-27781US | critical9.0 | — |
| CVE-2024-40584US | — | — |
| CVE-2017-7738US | high7.2 | — |
| CVE-2024-35279US | — | — |
| CVE-2023-46715US | medium4.3 | — |
| CVE-2024-54021US | medium5.8 | — |
| CVE-2024-40591US | high7.2 | — |
| CVE-2024-46665US | low3.7 | — |
| CVE-2024-40585US | — | — |
| CVE-2023-40721US | — | — |
| CVE-2024-36508US | — | — |
| CVE-2024-52966US | — | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
- CWE-288Authentication Bypass Using an Alternate Path or Channel2 CVEs
- CWE-113Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Request/Response Splitting')1 CVEs
- CWE-121Stack-based Buffer Overflow1 CVEs
- CWE-134Use of Externally-Controlled Format String1 CVEs
- CWE-201Insertion of Sensitive Information Into Sent Data1 CVEs
- CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1 CVEs
- CWE-266Incorrect Privilege Assignment1 CVEs
03
sources (2)
Which sources assert this record, and when.
- NLNCSC-NL (CSAF)14 CVEs
- USNVD / CVE1 CVEs
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan