FortiManager at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 42 | 4 |
| Oct 2026 | 4 | 0 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 1 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 1 | 0 |
| Apr 2026 | 2 | 0 |
| Mar 2026 | 6 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 1 | 1 |
| Dec 2025 | 1 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 1 | 0 |
| Jul 2025 | 1 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 1 | 0 |
| Apr 2025 | 2 | 0 |
| Mar 2025 | 5 | 1 |
| Feb 2025 | 3 | 0 |
| Jan 2025 | 14 | 0 |
| Dec 2024 | 2 | 0 |
Latest advisories
-
High max 9.8NCSC-2026-0488 42 CVEs
Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer
Fortinet heeft meerdere kwetsbaarheden verholpen in FortiManager en FortiAnalyzer, inclusief hun cloudversies en aanverwante producten zoals FortiManager Cloud, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiSASE-Sovereign en FortiSASE-Sovereign GUI.
-
High max 9.1WID-SEC-2026-4519 30 CVEs
Fortinet Produkte: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, Fortinet FortiManager, Fortinet FortiMail, Fortinet FortiAnalyzer und Fortinet FortiAuthenticator ausnutzen, um beliebigen Programmcode auszuführen, um Sicherheitsmechanismen zu umgehen, seine Ber…
-
High max 9.8
Fortinet Produkte: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiManager, Fortinet FortiOS, Fortinet FortiMail, Fortinet FortiClient und Fortinet FortiAnalyzer ausnutzen, um beliebigen Programmcode auszuführen, seine Rechte auszuweiten, Sicherh…
first Nov 10, 2026 -
HighWID-SEC-2026-4133 0 CVEs
Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS, FortiManager, FortiAnalyzer, FortiMail und FortiAuthenticator ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.
-
High max 7.9WID-SEC-2026-3935 4 CVEs
Fortinet FortiAnalyzer und FortiManager: Mehrere Schwachstellen ermöglichen SQL-Injection
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiAnalyzer und Fortinet FortiManager ausnutzen, um einen SQL-Injection Angriff durchzuführen.
130 results · Feed
-
Critical 9.1
A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAn…
-
Critical 9.3
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 th…
-
Low 3.8
A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiMa…
-
High 7.2
A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAna…
-
High 7.2
A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, F…
-
High 8.7
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 8.2
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 7.1
A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer…
-
High 7.2
A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, For…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in F…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in F…
-
High 7.2
A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAna…
-
High 7.2
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, …
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 throug…
-
High 7.1
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 8.2
A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan…
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1…
-
High 7.5
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thro…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 8.2
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 th…
-
High 7.2
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through …
-
High 8.7
A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Critical 9.8CVE-2026-126170 Public exploit
A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.…
-
High 8.4
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 th…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 8.0
A use of hard-coded credentials vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiManager 7.6.0 through …