pwn.watch: Fortinet incident updates https://pwn.watch/t/fortinet Live security incidents worldwide: CVEs, patch status, fixed versions, advisories and the posts that broke them. en Thu, 22 Oct 2026 16:42:01 GMT [high] Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability: CISA added CVE-2025-61624 to the KEV catalog (due 2026-10-19). https://pwn.watch/i/fortinet-multiple-products-cve-2025-61624 fortinet-multiple-products-cve-2025-61624:2026-10-16:CISA added CVE-2025-61624 to the KEV catalog (due 2026-10-19). Fri, 16 Oct 2026 00:00:00 GMT high Status: live, patched [critical] FortiMail unauthenticated file-write zero-day CVE-2026-104286: Fortinet remediates FortiMail Cloud by updating all instances to 7.6.7 / 8.0.2 GA. https://pwn.watch/i/fortimail-cve-2026-104286 fortimail-cve-2026-104286:2026-10-05:Fortinet remediates FortiMail Cloud by updating all instances to 7.6.7 / 8.0.2 GA. Mon, 05 Oct 2026 00:00:00 GMT critical Source: https://www.fortiguard.com/psirt/FG-IR-26-175 Status: live, patched [critical] FortiMail unauthenticated file-write zero-day CVE-2026-104286: Fortinet PSIRT FG-IR-26-175 patches and mitigations. https://pwn.watch/i/fortimail-cve-2026-104286 fortimail-cve-2026-104286:2026-10:Fortinet PSIRT FG-IR-26-175 patches and mitigations. Thu, 01 Oct 2026 00:00:00 GMT critical Status: live, patched [critical] FortiMail unauthenticated file-write zero-day CVE-2026-104286: Active exploitation and CISA alerts begin circulating. https://pwn.watch/i/fortimail-cve-2026-104286 fortimail-cve-2026-104286:~2026-09-30/10-01:Active exploitation and CISA alerts begin circulating. Wed, 30 Sep 2026 00:00:00 GMT critical Status: live, patched [high] Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability: CISA added CVE-2025-25249 to the KEV catalog (due 2026-09-12). https://pwn.watch/i/fortinet-multiple-products-cve-2025-25249 fortinet-multiple-products-cve-2025-25249:2026-09-09:CISA added CVE-2025-25249 to the KEV catalog (due 2026-09-12). Wed, 09 Sep 2026 00:00:00 GMT high Status: closed, patched [high] Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability: CISA added CVE-2025-68686 to the KEV catalog (due 2026-08-10). https://pwn.watch/i/fortinet-fortios-cve-2025-68686 fortinet-fortios-cve-2025-68686:2026-07-27:CISA added CVE-2025-68686 to the KEV catalog (due 2026-08-10). Mon, 27 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability: CISA added CVE-2026-25089, CVE-2026-39808 to the KEV catalog (due 2026-07-19). https://pwn.watch/i/fortinet-fortisandbox-cve-2026-25089 fortinet-fortisandbox-cve-2026-25089:2026-07-16:CISA added CVE-2026-25089, CVE-2026-39808 to the KEV catalog (due 2026-07-19). Thu, 16 Jul 2026 00:00:00 GMT high Status: closed, patched [high] Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability: CISA added CVE-2026-21643 to the KEV catalog (due 2026-04-16). https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643 fortinet-forticlient-ems-cve-2026-21643:2026-04-13:CISA added CVE-2026-21643 to the KEV catalog (due 2026-04-16). Mon, 13 Apr 2026 00:00:00 GMT high Status: closed, patched [high] Fortinet Multiple Products: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability: CISA added CVE-2026-24858 to the KEV catalog (due 2026-01-30). https://pwn.watch/i/fortinet-multiple-products-cve-2026-24858 fortinet-multiple-products-cve-2026-24858:2026-01-27:CISA added CVE-2026-24858 to the KEV catalog (due 2026-01-30). Tue, 27 Jan 2026 00:00:00 GMT high Status: closed, patched [critical] Fortinet Multiple Products: Multiple Products Improper Verification of Cryptographic Signature Vulnerability: CISA added CVE-2025-59718 to the KEV catalog (due 2025-12-23). https://pwn.watch/i/fortinet-multiple-products-cve-2025-59718 fortinet-multiple-products-cve-2025-59718:2025-12-16:CISA added CVE-2025-59718 to the KEV catalog (due 2025-12-23). Tue, 16 Dec 2025 00:00:00 GMT critical Status: closed, patched [medium] Fortinet FortiWeb: FortiWeb OS Command Injection Vulnerability: CISA added CVE-2025-58034 to the KEV catalog (due 2025-11-25). https://pwn.watch/i/fortinet-fortiweb-cve-2025-58034 fortinet-fortiweb-cve-2025-58034:2025-11-18:CISA added CVE-2025-58034 to the KEV catalog (due 2025-11-25). Tue, 18 Nov 2025 00:00:00 GMT medium Status: closed, patched [critical] Fortinet FortiWeb: FortiWeb Path Traversal Vulnerability: CISA added CVE-2025-64446 to the KEV catalog (due 2025-11-21). https://pwn.watch/i/fortinet-fortiweb-cve-2025-64446 fortinet-fortiweb-cve-2025-64446:2025-11-14:CISA added CVE-2025-64446 to the KEV catalog (due 2025-11-21). Fri, 14 Nov 2025 00:00:00 GMT critical Status: closed, patched [critical] Fortinet FortiWeb: FortiWeb SQL Injection Vulnerability: CISA added CVE-2025-25257 to the KEV catalog (due 2025-08-08). https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257 fortinet-fortiweb-cve-2025-25257:2025-07-18:CISA added CVE-2025-25257 to the KEV catalog (due 2025-08-08). Fri, 18 Jul 2025 00:00:00 GMT critical Status: closed, patched [critical] Fortinet FortiOS: FortiOS Use of Hard-Coded Credentials Vulnerability: CISA added CVE-2019-6693 to the KEV catalog (due 2025-07-16). https://pwn.watch/i/fortinet-fortios-cve-2019-6693 fortinet-fortios-cve-2019-6693:2025-06-25:CISA added CVE-2019-6693 to the KEV catalog (due 2025-07-16). Wed, 25 Jun 2025 00:00:00 GMT critical Status: closed, patched [critical] Fortinet Multiple Products: Multiple Products Stack-Based Buffer Overflow Vulnerability: CISA added CVE-2025-32756 to the KEV catalog (due 2025-06-04). https://pwn.watch/i/fortinet-multiple-products-cve-2025-32756 fortinet-multiple-products-cve-2025-32756:2025-05-14:CISA added CVE-2025-32756 to the KEV catalog (due 2025-06-04). Wed, 14 May 2025 00:00:00 GMT critical Status: closed, patched [critical] Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability: CISA added CVE-2025-24472 to the KEV catalog (due 2025-04-08). https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2025-24472 fortinet-fortios-and-fortiproxy-cve-2025-24472:2025-03-18:CISA added CVE-2025-24472 to the KEV catalog (due 2025-04-08). Tue, 18 Mar 2025 00:00:00 GMT critical Status: closed, patched [critical] Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability: CISA added CVE-2024-55591 to the KEV catalog (due 2025-01-21). https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2024-55591 fortinet-fortios-and-fortiproxy-cve-2024-55591:2025-01-14:CISA added CVE-2024-55591 to the KEV catalog (due 2025-01-21). Tue, 14 Jan 2025 00:00:00 GMT critical Status: closed, patched [critical] FortiManager 'FortiJump' missing authentication zero-day (CVE-2024-47575): CVE-2024-47575 published https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575 fortinet-fortimanager-fortijump-cve-2024-47575:2024-10-23:CVE-2024-47575 published Wed, 23 Oct 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-47575 Status: closed, patched [critical] FortiManager 'FortiJump' missing authentication zero-day (CVE-2024-47575): CISA added CVE-2024-47575 to the KEV catalog (federal deadline 2024-11-13) https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575 fortinet-fortimanager-fortijump-cve-2024-47575:2024-10-23:CISA added CVE-2024-47575 to the KEV catalog (federal deadline 2024-11-13) Wed, 23 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Fortinet Multiple Products Format String: CISA added CVE-2024-23113 to the KEV catalog (federal deadline 2024-10-30) https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113 fortinet-multiple-products-cve-2024-23113:2024-10-09:CISA added CVE-2024-23113 to the KEV catalog (federal deadline 2024-10-30) Wed, 09 Oct 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Fortinet FortiClient EMS SQL Injection: CISA added CVE-2023-48788 to the KEV catalog (federal deadline 2024-04-15) https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 fortinet-forticlient-ems-cve-2023-48788:2024-03-25:CISA added CVE-2023-48788 to the KEV catalog (federal deadline 2024-04-15) Mon, 25 Mar 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] Fortinet FortiClient EMS SQL Injection: CVE-2023-48788 published https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788 fortinet-forticlient-ems-cve-2023-48788:2024-03-12:CVE-2023-48788 published Tue, 12 Mar 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2023-48788 Status: closed, patched [critical] Fortinet Multiple Products Format String: CVE-2024-23113 published https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113 fortinet-multiple-products-cve-2024-23113:2024-02-15:CVE-2024-23113 published Thu, 15 Feb 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-23113 Status: closed, patched [critical] Fortinet FortiOS Out-of-Bound Write: CVE-2024-21762 published https://pwn.watch/i/fortinet-fortios-cve-2024-21762 fortinet-fortios-cve-2024-21762:2024-02-09:CVE-2024-21762 published Fri, 09 Feb 2024 00:00:00 GMT critical Source: https://nvd.nist.gov/vuln/detail/CVE-2024-21762 Status: closed, patched [critical] Fortinet FortiOS Out-of-Bound Write: CISA added CVE-2024-21762 to the KEV catalog (federal deadline 2024-02-16) https://pwn.watch/i/fortinet-fortios-cve-2024-21762 fortinet-fortios-cve-2024-21762:2024-02-09:CISA added CVE-2024-21762 to the KEV catalog (federal deadline 2024-02-16) Fri, 09 Feb 2024 00:00:00 GMT critical Source: https://www.cisa.gov/known-exploited-vulnerabilities-catalog Status: closed, patched [critical] FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997): CISA adds CVE-2023-27997 to the KEV catalog https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997:2023-06-13:CISA adds CVE-2023-27997 to the KEV catalog Tue, 13 Jun 2023 00:00:00 GMT critical Status: closed, patched [critical] FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997): Fortinet publishes FG-IR-23-097 and a blog post on exploitation and Volt Typhoon https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997 fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997:2023-06-12:Fortinet publishes FG-IR-23-097 and a blog post on exploitation and Volt Typhoon Mon, 12 Jun 2023 00:00:00 GMT critical Source: https://www.fortinet.com/blog/psirt-blogs/analysis-of-cve-2023-27997-and-clarifications-on-volt-typhoon-campaign Status: closed, patched [high] Fortinet FortiOS: Path Traversal (CVE-2022-41328): CISA added CVE-2022-41328 to the KEV catalog (due 2023-04-04). https://pwn.watch/i/fortinet-fortios-cve-2022-41328 fortinet-fortios-cve-2022-41328:2023-03-14:CISA added CVE-2022-41328 to the KEV catalog (due 2023-04-04). Tue, 14 Mar 2023 00:00:00 GMT high Status: closed, patched