Fortinet FortiAuthenticator vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20233
3. 20241
4. 20253
5. 20263

Newest CVEs

• CVE-2025-53379

  A out-of-bounds read vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.2, FortiAuthenticator 6.5 all versions may allow a remote unauthenticated…

  Fortinet · FortiAuthenticator

  High7.0
• CVE-2026-44277

  A improper access control vulnerability in Fortinet FortiAuthenticator 8.0.2, FortiAuthenticator 8.0.0, FortiAuthenticator 6.6.0 through 6.6.8,…

  Fortinet · FortiAuthenticator

  Critical9.1
• CVE-2026-21743

  A missing authorization vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all…

  Fortinet · FortiAuthenticator

  Medium6.8
• CVE-2025-57823

  A direct request ('forced browsing') vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator…

  Fortinet · FortiAuthenticator

  Low2.6
• CVE-2025-59923

  An improper access control vulnerability in Fortinet FortiAuthenticator 6.6.0 through 6.6.6, FortiAuthenticator 6.5 all versions, FortiAuthenticator 6.4 all…

  Fortinet · FortiAuthenticator

  Low2.6
• CVE-2022-23439

  A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

  Fortinet · FortiTester

  Medium4.1
• CVE-2024-23664

  A URL redirection to untrusted site ('open redirect') in Fortinet FortiAuthenticator version 6.6.0, version 6.5.3 and below, version 6.4.9 and below may allow…

  Fortinet · FortiAuthenticator

  Medium5.8
• CVE-2022-22302

  A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 and 6.0.0 through…

  Fortinet · FortiAuthenticator

  Medium5.3
• CVE-2022-35850

  An improper neutralization of script-related HTML tags in a web page vulnerability [CWE-80] in FortiAuthenticator versions 6.4.0 through 6.4.4, 6.3.0 through…

  Fortinet · FortiAuthenticator

  Medium4.2
• CVE-2023-26208

  A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote…

  Fortinet · FortiAuthenticator

  Low3.5