| CVE-2026-70468 | high | 7.3 | A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.… | Aug 12, 2026 | Aug 13, 2026 |
| CVE-2026-26035 | high | 8.8 | An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through … | Aug 12, 2026 | Aug 13, 2026 |
| CVE-2026-70466 | medium | 4.8 | A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, Forti… | Aug 12, 2026 | Aug 13, 2026 |
| CVE-2026-71407 | medium | 5.1 | A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 throug… | Aug 12, 2026 | Aug 13, 2026 |
| CVE-2026-70467 | low | 3.4 | A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 thro… | Aug 12, 2026 | Aug 12, 2026 |
| CVE-2026-71408 | medium | 5.0 | A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 throu… | Aug 12, 2026 | Aug 12, 2026 |
| CVE-2026-70465 | high | 7.3 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet F… | Aug 12, 2026 | Aug 13, 2026 |
| CVE-2026-59838 | medium | 5.9 | A improper neutralization of script-related html tags in a web page (basic xss) vulnerability in For… | Jul 15, 2026 | Jul 15, 2026 |
| CVE-2026-59841 | high | 7.5 | A improper restriction of communication channel to intended endpoints vulnerability in Fortinet Fort… | Jul 14, 2026 | Jul 15, 2026 |
| CVE-2026-59840 | medium | 4.3 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2026-59839 | medium | 5.5 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2026-59837 | medium | 6.6 | A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2026-59836 | high | 7.5 | A improper certificate validation vulnerability in Fortinet FortiClientEMS 7.4.3 through 7.4.5, Fort… | Jul 14, 2026 | Jul 15, 2026 |
| CVE-2026-23573 | medium | 6.1 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilit… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2025-62826 | low | 3.1 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2025-62675 | low | 3.4 | An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerabili… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2025-53379 | high | 7.5 | A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenti… | Jul 14, 2026 | Jul 15, 2026 |
| CVE-2025-43892 | medium | 4.3 | A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.… | Jul 14, 2026 | Aug 11, 2026 |
| CVE-2026-59835 | high | 7.7 | A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2, F… | Jul 14, 2026 | Jul 16, 2026 |
| CVE-2026-49938 | medium | 6.5 | A improper access control vulnerability in Fortinet FortiPortal 7.4.0 through 7.4.7, FortiPortal 7.2… | Jun 9, 2026 | Jul 23, 2026 |
| CVE-2026-25089 | critical | 9.8 | A improper neutralization of special elements used in an os command ('os command injection') vulnera… | Jun 9, 2026 | Jul 23, 2026 |
| CVE-2025-67862 | medium | 6.0 | An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerabili… | Jun 9, 2026 | Aug 11, 2026 |
| CVE-2026-44279 | medium | 5.5 | An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2… | May 12, 2026 | Jun 26, 2026 |
| CVE-2026-44278 | low | 2.3 | A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4… | May 12, 2026 | May 16, 2026 |
| CVE-2026-44277 | critical | 9.8 | A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0… | May 12, 2026 | May 28, 2026 |
