Product of Fortinet
FortiOS
As of , 9 Fortinet FortiOS vulnerabilities are on CISA's list of exploited vulnerabilities, 6 of them used in ransomware campaigns; 1 was added in 2026. Patch first: CVE-2018-13379.
Patch first
| # | Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|---|
| 1 | CVE-2018-13379SSL VPN Path Traversal | Fortinet FortiOS | Patch this weekRansomware use; Metasploit module; EPSS 0.99 | 0.99 | ||
| 2 | CVE-2024-21762Out-of-Bound Write | Fortinet FortiOS | Patch this weekRansomware use; EPSS 0.83 | 0.83 | ||
| 3 | CVE-2022-42475Heap-Based Buffer Overflow | Fortinet FortiOS | Patch this weekRansomware use; EPSS 0.99 | 0.99 | ||
| 4 | CVE-2020-12812SSL VPN Improper Authentication | Fortinet FortiOS | Patch this weekRansomware use | 0.45 | ||
| 5 | CVE-2019-5591Default Configuration | Fortinet FortiOS | Patch this weekRansomware use | 0.18 | ||
| 6 | CVE-2019-6693Use of Hard-Coded Credentials | Fortinet FortiOS | Patch this weekRansomware use | 0.06 | ||
| 7 | CVE-2025-68686Exposure of Sensitive Information to an Unauthorized Actor | Fortinet FortiOS | Patch soon | 0.30 | ||
| 8 | CVE-2022-41328Path Traversal | Fortinet FortiOS | Patch soon | 0.11 | ||
| 9 | CVE-2021-44168Arbitrary File Download | Fortinet FortiOS | Patch soon | 0.01 |
Added each year
Show the numbers
| Period | entries added |
|---|---|
| 2021 | 4 |
| 2022 | 1 |
| 2023 | 1 |
| 2024 | 1 |
| 2025 | 1 |
| 2026 | 1 |