https://exploit-radar.com/en/flux/marques/fortinet.xml Exploit Radar: exploited Fortinet vulnerabilities The latest additions to CISA’s catalog of exploited vulnerabilities for Fortinet products. 2026-09-09T00:00:00Z Exploit Radar https://exploit-radar.com/en/cve/CVE-2025-25249/ CVE-2025-25249 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-09-09T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on September 9, 2026. https://exploit-radar.com/en/cve/CVE-2025-68686/ CVE-2025-68686 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-07-27T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on July 27, 2026. https://exploit-radar.com/en/cve/CVE-2026-25089/ CVE-2026-25089 — Fortinet FortiSandbox 2026-07-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-39808/ CVE-2026-39808 — Fortinet FortiSandbox 2026-07-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. Start with internet-facing devices. CISA also asks you to hunt for signs of compromise: patching is not enough if the device has already been breached. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on July 16, 2026. https://exploit-radar.com/en/cve/CVE-2026-21643/ CVE-2026-21643 — Fortinet FortiClient EMS 2026-04-13T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 13, 2026. https://exploit-radar.com/en/cve/CVE-2026-35616/ CVE-2026-35616 — Fortinet FortiClient EMS 2026-04-06T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on April 6, 2026. https://exploit-radar.com/en/cve/CVE-2026-24858/ CVE-2026-24858 — Fortinet FortiOS / FortiProxy (FortiGate) 2026-01-27T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 3 days. Added to CISA’s catalog of exploited vulnerabilities on January 27, 2026. https://exploit-radar.com/en/cve/CVE-2025-59718/ CVE-2025-59718 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-12-16T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on December 16, 2025. https://exploit-radar.com/en/cve/CVE-2025-58034/ CVE-2025-58034 — Fortinet FortiWeb 2025-11-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on November 18, 2025. https://exploit-radar.com/en/cve/CVE-2025-64446/ CVE-2025-64446 — Fortinet FortiWeb 2025-11-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 7 days. Added to CISA’s catalog of exploited vulnerabilities on November 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-25257/ CVE-2025-25257 — Fortinet FortiWeb 2025-07-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on July 18, 2025. https://exploit-radar.com/en/cve/CVE-2019-6693/ CVE-2019-6693 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-06-25T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 25, 2025. https://exploit-radar.com/en/cve/CVE-2025-32756/ CVE-2025-32756 — Fortinet FortiVoice / FortiFone 2025-05-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on May 14, 2025. https://exploit-radar.com/en/cve/CVE-2025-24472/ CVE-2025-24472 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-03-18T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. For cloud services, follow the guidance from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 18, 2025. https://exploit-radar.com/en/cve/CVE-2024-55591/ CVE-2024-55591 — Fortinet FortiOS / FortiProxy (FortiGate) 2025-01-14T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 14, 2025. https://exploit-radar.com/en/cve/CVE-2024-47575/ CVE-2024-47575 — Fortinet FortiManager / FortiAnalyzer 2024-10-23T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 23, 2024. https://exploit-radar.com/en/cve/CVE-2024-23113/ CVE-2024-23113 — Fortinet FortiOS / FortiProxy (FortiGate) 2024-10-09T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on October 9, 2024. https://exploit-radar.com/en/cve/CVE-2023-48788/ CVE-2023-48788 — Fortinet FortiClient EMS 2024-03-25T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on March 25, 2024. https://exploit-radar.com/en/cve/CVE-2024-21762/ CVE-2024-21762 — Fortinet FortiOS / FortiProxy (FortiGate) 2024-02-09T00:00:00Z Apply the patches or mitigations from Fortinet; if none are available, stop using the product. CISA deadline: 7 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on February 9, 2024. https://exploit-radar.com/en/cve/CVE-2023-27997/ CVE-2023-27997 — Fortinet FortiOS / FortiProxy (FortiGate) 2023-06-13T00:00:00Z Apply the security update from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on June 13, 2023. https://exploit-radar.com/en/cve/CVE-2022-41328/ CVE-2022-41328 — Fortinet FortiOS / FortiProxy (FortiGate) 2023-03-14T00:00:00Z Apply the security update from Fortinet. CISA deadline: 21 days. Added to CISA’s catalog of exploited vulnerabilities on March 14, 2023. https://exploit-radar.com/en/cve/CVE-2022-42475/ CVE-2022-42475 — Fortinet FortiOS / FortiProxy (FortiGate) 2022-12-13T00:00:00Z Apply the security update from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on December 13, 2022. https://exploit-radar.com/en/cve/CVE-2022-40684/ CVE-2022-40684 — Fortinet FortiOS / FortiProxy (FortiGate) 2022-10-11T00:00:00Z Apply the security update from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on October 11, 2022. https://exploit-radar.com/en/cve/CVE-2018-13374/ CVE-2018-13374 — Fortinet FortiOS / FortiProxy (FortiGate) 2022-09-08T00:00:00Z Apply the security update from Fortinet. CISA deadline: 21 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on September 8, 2022. https://exploit-radar.com/en/cve/CVE-2018-13382/ CVE-2018-13382 — Fortinet FortiOS / FortiProxy (FortiGate) 2022-01-10T00:00:00Z Apply the security update from Fortinet. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2022. https://exploit-radar.com/en/cve/CVE-2018-13383/ CVE-2018-13383 — Fortinet FortiOS / FortiProxy (FortiGate) 2022-01-10T00:00:00Z Apply the security update from Fortinet. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on January 10, 2022. https://exploit-radar.com/en/cve/CVE-2021-44168/ CVE-2021-44168 — Fortinet FortiOS / FortiProxy (FortiGate) 2021-12-10T00:00:00Z Apply the security update from Fortinet. CISA deadline: 14 days. Added to CISA’s catalog of exploited vulnerabilities on December 10, 2021. https://exploit-radar.com/en/cve/CVE-2018-13379/ CVE-2018-13379 — Fortinet FortiOS / FortiProxy (FortiGate) 2021-11-03T00:00:00Z Apply the security update from Fortinet. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2020-12812/ CVE-2020-12812 — Fortinet FortiOS / FortiProxy (FortiGate) 2021-11-03T00:00:00Z Apply the security update from Fortinet. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021. https://exploit-radar.com/en/cve/CVE-2019-5591/ CVE-2019-5591 — Fortinet FortiOS / FortiProxy (FortiGate) 2021-11-03T00:00:00Z Apply the security update from Fortinet. CISA deadline: 181 days. Used in ransomware campaigns. Added to CISA’s catalog of exploited vulnerabilities on November 3, 2021.