Fortinet FortiAnalyzer vulnerabilities
74 published CVEs name Fortinet FortiAnalyzer among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 74
- Last 12 months
- 16
- Critical
- 2
- Known exploited
- 1
Critical 2High 8Medium 58Low 6Not scored 0
CVEs per yearBy the year they were published
- 20191
- 20201
- 202320
- 20236
- 20233
- 202525
- 20267
- 202611
Known exploitedNewest addition to KEV first
- CVE-2026-24858
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer…
Fortinet · FortiWeb
ExploitedCritical9.4
Newest CVEs
- CVE-2026-23707
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
Fortinet · FortiManager Cloud
Medium6.5 - CVE-2026-23706
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
Fortinet · FortiAnalyzer Cloud
Medium5.9 - CVE-2026-23705
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
Fortinet · FortiAnalyzer
Medium6.5 - CVE-2025-46773
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…
Fortinet · FortiAnalyzer Cloud
High7.9 - CVE-2026-84391
A use of uninitialized variable vulnerability in Fortinet FortiAnalyzer 7.6.3 through 7.6.6 may allow attacker to denial of service via <insert attack vector…
Fortinet · FortiAnalyzer
Medium5.9 - CVE-2025-67604
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all…
Fortinet · FortiAnalyzer
Medium5.2 - CVE-2025-68649
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…
Fortinet · FortiManager Cloud
Medium5.4 - CVE-2025-61848
An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…
Fortinet · FortiManager
Medium6.5 - CVE-2026-22629
An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions,…
Fortinet · FortiAnalyzer
Low3.4 - CVE-2025-68482
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all…
Fortinet · FortiAnalyzer
Medium6.3