Fortinet FortiNDR vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20231
4. 20258
5. 20262

Known exploitedNewest addition to KEV first

• CVE-2025-32756

  A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…

  Fortinet · FortiNDR

  ExploitedCritical9.6

Newest CVEs

• CVE-2026-25088

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiNDR 7.6.0 through 7.6.2, FortiNDR 7.4.0…

  Fortinet · FortiNDR

  Medium5.1
• CVE-2024-23104

  An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.8, FortiNDR 7.2 all…

  Fortinet · FortiVoice

  Medium5.4
• CVE-2024-47569

  A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…

  Fortinet · FortiManager

  Medium4.2
• CVE-2024-40588

  Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all…

  Fortinet · FortiCamera

  Medium4.2
• CVE-2025-32756

  A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…

  Fortinet · FortiNDR

  ExploitedCritical9.6
• CVE-2023-33302

  A buffer copy without checking size of input ('classic buffer overflow') in Fortinet FortiMail webmail and administrative interface version 6.4.0 through 6.4.4…

  Fortinet · FortiNDR

  Medium4.5
• CVE-2021-24008

  An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below,…

  Fortinet · FortiDDoS

  Medium5.0
• CVE-2024-47573

  An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below,…

  Fortinet · FortiNDR

  Medium6.0
• CVE-2023-48790

  A cross site request forgery vulnerability [CWE-352] in Fortinet FortiNDR version 7.4.0, 7.2.0 through 7.2.1 and 7.1.0 through 7.1.1 and before 7.0.5 may allow…

  Fortinet · FortiNDR

  High7.1
• CVE-2022-23439

  A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

  Fortinet · FortiTester

  Medium4.1