# Fortinet security incidents · pwn.watch

> Security incidents tagged Fortinet (vendor, product, platform or attack type).

Page: https://pwn.watch/t/fortinet · generated 2026-10-22T16:42:00.965Z

## Status (as of 2026-10-22)
- Incidents: 22 (2 live, 0 live and not fully patched, 22 patched)
- Days without a Fortinet security incident: 6
- Newest incident started: 2026-10-16

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/fortinet.json
- RSS (every update): https://pwn.watch/t/fortinet/feed.xml
- This file: https://pwn.watch/t/fortinet/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-61624) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-61624.json)): high, live, patched, started 2026-10-16, CVE-2025-61624
- [FortiMail unauthenticated file-write zero-day CVE-2026-104286](https://pwn.watch/i/fortimail-cve-2026-104286) ([json](https://pwn.watch/i/fortimail-cve-2026-104286.json)): critical, live, patched, started 2026-09-30, CVE-2026-104286
- [Fortinet Multiple Products: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-25249) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-25249.json)): high, closed, patched, started 2026-09-09, CVE-2025-25249
- [Fortinet FortiOS: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability](https://pwn.watch/i/fortinet-fortios-cve-2025-68686) ([json](https://pwn.watch/i/fortinet-fortios-cve-2025-68686.json)): high, closed, patched, started 2026-07-27, CVE-2025-68686
- [Fortinet FortiSandbox: Fortinet FortiSandbox OS Command Injection Vulnerability](https://pwn.watch/i/fortinet-fortisandbox-cve-2026-25089) ([json](https://pwn.watch/i/fortinet-fortisandbox-cve-2026-25089.json)): high, closed, patched, started 2026-07-16, CVE-2026-25089, CVE-2026-39808
- [Fortinet FortiClient EMS: Fortinet FortiClient EMS SQL Injection Vulnerability](https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643) ([json](https://pwn.watch/i/fortinet-forticlient-ems-cve-2026-21643.json)): high, closed, patched, started 2026-04-13, CVE-2026-21643
- [FortiClient EMS CVE-2026-35616 exploited (CVSS 9.1)](https://pwn.watch/i/forticlient-ems-cve-2026-35616) ([json](https://pwn.watch/i/forticlient-ems-cve-2026-35616.json)): critical, closed, patched, started 2026-04-01, CVE-2026-35616
- [Fortinet Multiple Products: Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2026-24858) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2026-24858.json)): high, closed, patched, started 2026-01-27, CVE-2026-24858
- [Fortinet Multiple Products: Multiple Products Improper Verification of Cryptographic Signature Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-59718) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-59718.json)): critical, closed, patched, started 2025-12-16, CVE-2025-59718
- [Fortinet FortiWeb: FortiWeb OS Command Injection Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-58034) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-58034.json)): medium, closed, patched, started 2025-11-18, CVE-2025-58034
- [Fortinet FortiWeb: FortiWeb Path Traversal Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-64446) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-64446.json)): critical, closed, patched, started 2025-11-14, CVE-2025-64446
- [Fortinet FortiWeb: FortiWeb SQL Injection Vulnerability](https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257) ([json](https://pwn.watch/i/fortinet-fortiweb-cve-2025-25257.json)): critical, closed, patched, started 2025-07-18, CVE-2025-25257
- [Fortinet FortiOS: FortiOS Use of Hard-Coded Credentials Vulnerability](https://pwn.watch/i/fortinet-fortios-cve-2019-6693) ([json](https://pwn.watch/i/fortinet-fortios-cve-2019-6693.json)): critical, closed, patched, started 2025-06-25, CVE-2019-6693
- [Fortinet Multiple Products: Multiple Products Stack-Based Buffer Overflow Vulnerability](https://pwn.watch/i/fortinet-multiple-products-cve-2025-32756) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2025-32756.json)): critical, closed, patched, started 2025-05-14, CVE-2025-32756
- [Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2025-24472) ([json](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2025-24472.json)): critical, closed, patched, started 2025-03-18, CVE-2025-24472
- [Fortinet FortiOS and FortiProxy: FortiOS and FortiProxy Authentication Bypass Vulnerability](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2024-55591) ([json](https://pwn.watch/i/fortinet-fortios-and-fortiproxy-cve-2024-55591.json)): critical, closed, patched, started 2025-01-14, CVE-2024-55591
- [FortiManager 'FortiJump' missing authentication zero-day (CVE-2024-47575)](https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575) ([json](https://pwn.watch/i/fortinet-fortimanager-fortijump-cve-2024-47575.json)): critical, closed, patched, started 2024-10-23, CVE-2024-47575
- [Fortinet FortiClient EMS SQL Injection](https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788) ([json](https://pwn.watch/i/fortinet-forticlient-ems-cve-2023-48788.json)): critical, closed, patched, started 2024-03-12, CVE-2023-48788
- [Fortinet Multiple Products Format String](https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113) ([json](https://pwn.watch/i/fortinet-multiple-products-cve-2024-23113.json)): critical, closed, patched, started 2024-02-15, CVE-2024-23113
- [Fortinet FortiOS Out-of-Bound Write](https://pwn.watch/i/fortinet-fortios-cve-2024-21762) ([json](https://pwn.watch/i/fortinet-fortios-cve-2024-21762.json)): critical, closed, patched, started 2024-02-09, CVE-2024-21762
- [FortiOS SSL-VPN pre-auth heap overflow (XORtigate, CVE-2023-27997)](https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997) ([json](https://pwn.watch/i/fortinet-fortios-ssl-vpn-xortigate-cve-2023-27997.json)): critical, closed, patched, started 2023-06-12, CVE-2023-27997
- [Fortinet FortiOS: Path Traversal (CVE-2022-41328)](https://pwn.watch/i/fortinet-fortios-cve-2022-41328) ([json](https://pwn.watch/i/fortinet-fortios-cve-2022-41328.json)): high, closed, patched, started 2023-03-14, CVE-2022-41328