FortiWeb at a glance
Show as table
| Month | Vulnerabilities | Critical |
|---|---|---|
| Nov 2026 | 0 | 0 |
| Oct 2026 | 0 | 0 |
| Sep 2026 | 0 | 0 |
| Aug 2026 | 2 | 0 |
| Jul 2026 | 0 | 0 |
| Jun 2026 | 0 | 0 |
| May 2026 | 0 | 0 |
| Apr 2026 | 3 | 0 |
| Mar 2026 | 6 | 0 |
| Feb 2026 | 0 | 0 |
| Jan 2026 | 1 | 1 |
| Dec 2025 | 3 | 1 |
| Nov 2025 | 3 | 1 |
| Oct 2025 | 1 | 0 |
| Sep 2025 | 1 | 0 |
| Aug 2025 | 4 | 0 |
| Jul 2025 | 1 | 1 |
| Jun 2025 | 1 | 0 |
| May 2025 | 0 | 0 |
| Apr 2025 | 3 | 0 |
| Mar 2025 | 6 | 1 |
| Feb 2025 | 2 | 0 |
| Jan 2025 | 3 | 0 |
| Dec 2024 | 0 | 0 |
Latest advisories
-
High max 8.1
OpenSSH: Schwachstelle ermöglicht Codeausführung
Ein entfernter, anonymer Angreifer kann eine Schwachstelle in OpenSSH ausnutzen, um beliebigen Programmcode mit root Rechten auszuführen.
first Jun 30, 2024 -
High max 8.8NCSC-2026-0300 2 CVEs
Kwetsbaarheden verholpen in Fortinet FortiWeb
Fortinet heeft kwetsbaarheden verholpen in FortiWeb.
-
High max 8.8WID-SEC-2026-2810 2 CVEs
Fortinet FortiWeb: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Daten zu manipulieren.
-
Medium max 6.7
Fortinet FortiWeb: Schwachstelle ermöglicht Codeausführung
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Fortinet FortiWeb ausnutzen, um beliebigen Programmcode auszuführen.
first Apr 14, 2026 -
Medium max 6.2
Fortinet FortiWeb: Mehrere Schwachstellen
Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um einen Denial of Service Angriff durchzuführen oder Code auszuführen.
first Apr 14, 2026
75 results · Feed
-
High 8.8
An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6…
-
Medium 4.8
A incomplete list of disallowed inputs vulnerability [CWE-184] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, …
-
Medium 6.7
An out-of-bounds write vulnerability [CWE-787] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 t…
-
Medium 4.4
A integer overflow or wraparound vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, …
-
Medium 6.2
Multiple Relative Path Traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, Forti…
-
Medium 6.7
A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …
-
Low 2.5
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6…
-
Medium 5.9
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb …
-
High 7.3
An Improper Control of Interaction Frequency vulnerability [CWE-799] vulnerability in Fortinet FortiWeb 8.0.0 through 8…
-
Medium 5.0
An authentication bypass by spoofing vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4…
-
Medium 5.9
A stack-based buffer overflow vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.3, FortiWeb 7.6.0 through 7.6.6, For…
-
Critical 9.4
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnal…
KEV Jan 27, 2026 -
Critical 9.1
An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.…
-
Medium 4.4
A use of password hash instead of password for authentication vulnerability [CWE-836] vulnerability in Fortinet FortiWe…
-
High 7.1
A reliance on cookies without validation and integrity checking vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1,…
-
Medium 4.8
A use of hard-coded credentials vulnerability in Fortinet FortiWeb 7.6.0, FortiWeb 7.4 all versions, FortiWeb 7.2 all v…
-
Medium 6.7
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] vu…
KEV Nov 18, 2025 -
Critical 9.4
A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWe…
KEV Nov 14, 2025 -
Medium 4.2
A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail …
-
Medium 4.7CVE-2025-53609 EPSS 12%
A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.…
-
Medium 6.5
A improper neutralization of special elements used in an os command ('os command injection') vulnerability [CWE-78] in …
-
Medium 6.7
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in…
-
High 7.7
A improper handling of parameters vulnerability in Fortinet FortiWeb 7.6.0 through 7.6.3, FortiWeb 7.4.0 through 7.4.7,…
-
Medium 6.3
A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiWeb CLI version 7.6.0 through 7.6.3 and before 7…
-
Critical 9.6
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerab…
KEV Jul 18, 2025 -
Medium 6.5
An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS…
-
Low 3.0
A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS versi…
-
Medium 5.6CVE-2024-46671 Public exploit
An Incorrect User Management vulnerability [CWE-286] in FortiWeb version 7.6.2 and below, version 7.4.6 and below, vers…
-
Medium 6.8CVE-2025-25254 EPSS 17%
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiWeb ve…
-
Critical 9.3
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.…
-
Medium 5.5
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least vesrions 7.4.0 through 7.4.6 and …
-
Low 2.6
An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] in Forti…
-
High 7.0
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.…
-
Medium 5.5
An improper handling of syntactically invalid structure in Fortinet FortiWeb at least verions 7.4.0 through 7.4.6 and 7…
-
Medium 5.2
A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 th…
-
Medium 6.8
An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.4.…
-
Medium 6.3
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb 7.0.0…
-
Medium 5.2
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorde…
-
Medium 6.1
A stack-based buffer overflow in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1 may allow a pr…
-
Low 2.6
A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWeb versions 6.…