How we count
Every figure on this page is a direct count of entries in CISA’s Known Exploited Vulnerabilities catalog attributed by CISA to Fortinet (KEV field vendorProject), refreshed daily. “Ransomware-linked” counts entries CISA marks as known to be used in ransomware campaigns; the remainder are “unknown” to CISA, not confirmed ransomware-free. A KEV listing means the vulnerability has been observed exploited in the wild. Snapshot as of 2026-08-31.
Exploited Fortinet vulnerabilities (CISA KEV)
| CVE | Product | Vulnerability | Added | |
|---|---|---|---|---|
| CVE-2025-68686 | FortiOS | Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability | 2026-07-27 | |
| CVE-2026-25089 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | |
| CVE-2026-39808 | FortiSandbox | Fortinet FortiSandbox OS Command Injection Vulnerability | 2026-07-16 | |
| CVE-2026-21643 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 2026-04-13 | |
| CVE-2026-35616 | FortiClient EMS | Fortinet FortiClient EMS Improper Access Control Vulnerability | 2026-04-06 | |
| CVE-2026-24858 | Multiple Products | Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability | 2026-01-27 | |
| CVE-2025-59718 | Multiple Products | Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability | 2025-12-16 | |
| CVE-2025-58034 | FortiWeb | Fortinet FortiWeb OS Command Injection Vulnerability | 2025-11-18 | |
| CVE-2025-64446 | FortiWeb | Fortinet FortiWeb Path Traversal Vulnerability | 2025-11-14 | |
| CVE-2025-25257 | FortiWeb | Fortinet FortiWeb SQL Injection Vulnerability | 2025-07-18 | |
| CVE-2019-6693 | FortiOS | Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability | 2025-06-25 | ransomware |
| CVE-2025-32756 | Multiple Products | Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability | 2025-05-14 | |
| CVE-2025-24472 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-03-18 | ransomware |
| CVE-2024-55591 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability | 2025-01-14 | ransomware |
| CVE-2024-47575 | FortiManager | Fortinet FortiManager Missing Authentication Vulnerability | 2024-10-23 | |
| CVE-2024-23113 | Multiple Products | Fortinet Multiple Products Format String Vulnerability | 2024-10-09 | |
| CVE-2023-48788 | FortiClient EMS | Fortinet FortiClient EMS SQL Injection Vulnerability | 2024-03-25 | ransomware |
| CVE-2024-21762 | FortiOS | Fortinet FortiOS Out-of-Bound Write Vulnerability | 2024-02-09 | ransomware |
| CVE-2023-27997 | FortiOS and FortiProxy SSL-VPN | Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability | 2023-06-13 | ransomware |
| CVE-2022-41328 | FortiOS | Fortinet FortiOS Path Traversal Vulnerability | 2023-03-14 | |
| CVE-2022-42475 | FortiOS | Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability | 2022-12-13 | ransomware |
| CVE-2022-40684 | Multiple Products | Fortinet Multiple Products Authentication Bypass Vulnerability | 2022-10-11 | ransomware |
| CVE-2018-13374 | FortiOS and FortiADC | Fortinet FortiOS and FortiADC Improper Access Control Vulnerability | 2022-09-08 | ransomware |
| CVE-2018-13382 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Improper Authorization | 2022-01-10 | ransomware |
| CVE-2018-13383 | FortiOS and FortiProxy | Fortinet FortiOS and FortiProxy Out-of-bounds Write | 2022-01-10 | ransomware |
| CVE-2021-44168 | FortiOS | Fortinet FortiOS Arbitrary File Download | 2021-12-10 | |
| CVE-2019-5591 | FortiOS | Fortinet FortiOS Default Configuration Vulnerability | 2021-11-03 | ransomware |
| CVE-2020-12812 | FortiOS | Fortinet FortiOS SSL VPN Improper Authentication Vulnerability | 2021-11-03 | ransomware |
| CVE-2018-13379 | FortiOS | Fortinet FortiOS SSL VPN Path Traversal Vulnerability | 2021-11-03 | ransomware |
← All vendors by exploited-vulnerability count
🤖 Generated by defend.network from the CISA KEV catalog. Counts are deterministic aggregates of official CISA data; verify individual advisories at the linked sources.