Fortinet FortiManager vulnerabilities

CVEs per yearBy the year they were published

1. 20171
2. 20191
3. 20201
4. 20235
5. 20233
6. 202420
7. 202539
8. 20269
9. 20268

Known exploitedNewest addition to KEV first

• CVE-2026-24858

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer…

  Fortinet · FortiWeb

  ExploitedCritical9.4
• CVE-2024-47575

  A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0…

  Fortinet · FortiManager

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-23707

  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…

  Fortinet · FortiManager Cloud

  Medium6.5
• CVE-2026-23706

  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…

  Fortinet · FortiAnalyzer Cloud

  Medium5.9
• CVE-2026-23705

  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0…

  Fortinet · FortiAnalyzer

  Medium6.5
• CVE-2026-106171

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager 8.0.0, FortiManager 7.6.0…

  Fortinet · FortiManager

  Medium5.3
• CVE-2026-22575

  An improper access control vulnerability in Fortinet FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.10, FortiManager 7.2 all versions,…

  Fortinet · FortiManager

  Medium4.7
• CVE-2026-70468

  A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5…

  Fortinet · FortiManager

  High7.3
• CVE-2025-67604

  A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all…

  Fortinet · FortiAnalyzer

  Medium5.2
• CVE-2025-68649

  An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer…

  Fortinet · FortiManager Cloud

  Medium5.4
• CVE-2025-61848

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4,…

  Fortinet · FortiManager

  Medium6.5
• CVE-2026-22629

  An improper restriction of excessive authentication attempts vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4 all versions,…

  Fortinet · FortiAnalyzer

  Low3.4