FortiManager Cloud at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 36 | 2 |
| Oct 2026 | 2 | 0 |
| Sep 2026 | 1 | 0 |
| Aug 2026 | 1 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 4 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 0 | 0 |
| Dec 2025 | 0 | 0 |
| Nov 2025 | 0 | 0 |
| Oct 2025 | 2 | 0 |
| Sep 2025 | 0 | 0 |
| Aug 2025 | 0 | 0 |
| Jul 2025 | 0 | 0 |
| Jun 2025 | 0 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 0 | 0 |
| Mar 2025 | 0 | 0 |
| Feb 2025 | 0 | 0 |
| Jan 2025 | 4 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 9.8NCSC-2026-0488 42 CVEs
Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer
Fortinet heeft meerdere kwetsbaarheden verholpen in FortiManager en FortiAnalyzer, inclusief hun cloudversies en aanverwante producten zoals FortiManager Cloud, FortiAnalyzer Cloud, FortiAnalyzer-BigData, FortiSASE-Sovereign en FortiSASE-Sovereign GUI.
-
High max 9.6NCSC-2026-0355 10 CVEs
Kwetsbaarheden verholpen in Fortinet Forti-producten
Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer, FortiOS, FortiPAM, FortiProxy, FortiSandbox, FortiManager, FortiManager Cloud, FortiMonitorOnSight, FortiClient Windows, FortiSIEM en FortiSOAR.
-
High max 7.3NCSC-2026-0299 1 CVE
Kwetsbaarheid verholpen in Fortinet FortiManager
Fortinet heeft een kwetsbaarheid verholpen in FortiManager en FortiManager Cloud versies 7.2.5 tot en met 7.6.1.
-
High max 7.3NCSC-2026-0120 3 CVEs
Kwetsbaarheden verholpen in Fortinet FortiAnalyzer en FortiManager
Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer, FortiAnalyzer Cloud, FortiManager en FortiManager Cloud.
-
High max 7.0NCSC-2026-0086 7 CVEs
Kwetsbaarheden verholpen in Fortinet FortiManager en FortiAnalyzer
Fortinet heeft kwetsbaarheden verholpen in FortiAnalyzer en FortiManager (inclusief cloudvarianten).
53 results · Feed
-
Critical 9.1
A authorization bypass through user-controlled key vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAn…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Low 3.8
A improper privilege management vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiMa…
-
High 7.2
A improper neutralization of argument delimiters in a command ('argument injection') vulnerability in Fortinet FortiAna…
-
High 7.2
A out-of-bounds write vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.7, F…
-
High 8.7
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 8.2
A incorrect authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7.6.…
-
High 7.1
A missing authorization vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.7, FortiAnalyzer…
-
High 7.2
A unintended proxy or intermediary ('confused deputy') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, For…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper neutralization of special elements in output used by a downstream component ('injection') vulnerability in F…
-
High 7.2
A unrestricted upload of file with dangerous type vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAna…
-
High 7.2
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiAnalyzer 8.0.0, …
-
High 7.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyze…
-
High 7.2
A improper privilege management vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.1 throug…
-
High 7.1
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1…
-
High 7.5
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 thro…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
High 8.2
A authentication bypass by spoofing vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 th…
-
High 7.2
A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through …
-
High 8.7
A authorization bypass through user-controlled key vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1, FortiMan…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 8.1
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through …
-
High 7.2
A improper control of generation of code ('code injection') vulnerability in Fortinet FortiManager 8.0.0 through 8.0.1,…
-
High 7.2
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer 7.6.0 through 7…
-
High 8.8
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiA…
-
High 7.2
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Critical 9.8CVE-2026-126170 Public exploit
A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.…
-
High 8.4
A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiManager 8.0.0 th…
-
High 7.2
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.1, FortiAnalyzer…
-
High 7.3
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyz…
-
Medium 6.5
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerab…
-
Medium 5.3
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Medium 4.7
An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.1…
-
High 7.3
A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7…