Product of Fortinet

FortiOS and FortiProxy

As of , 4 Fortinet FortiOS and FortiProxy vulnerabilities are on CISA's list of exploited vulnerabilities, 4 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2024-55591.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2024-55591Authentication BypassFortinet FortiOS and FortiProxyPatch this weekRansomware use; EPSS 0.940.94
2CVE-2018-13382Improper AuthorizationFortinet FortiOS and FortiProxyPatch this weekRansomware use; EPSS 0.820.82
3CVE-2018-13383Out-of-bounds WriteFortinet FortiOS and FortiProxyPatch this weekRansomware use0.34
4CVE-2025-24472Authentication BypassFortinet FortiOS and FortiProxyPatch this weekRansomware use0.07

Added each year

0.511.522022: 2220222023: nonenone20232024: nonenone20242025: 2220252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20222
2023none
2024none
20252
2026none

Used in ransomware

Changes CISA made to these entries

  1. CVE-2024-55591 Fortinet FortiOS and FortiProxyRansomware use: Unknown to Known.

Every change we recorded