Fortinet FortiRecorder vulnerabilities

CVEs per yearBy the year they were published

1. 20211
2. 20221
3. 20233
4. 20258
5. 20261

Known exploitedNewest addition to KEV first

• CVE-2025-32756

  A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…

  Fortinet · FortiNDR

  ExploitedCritical9.6

Newest CVEs

• CVE-2025-55717

  A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4,…

  Fortinet · FortiVoice

  Low3.8
• CVE-2024-47569

  A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all…

  Fortinet · FortiManager

  Medium4.2
• CVE-2024-40588

  Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all…

  Fortinet · FortiCamera

  Medium4.2
• CVE-2025-32756

  A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1…

  Fortinet · FortiNDR

  ExploitedCritical9.6
• CVE-2022-23439

  A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

  Fortinet · FortiTester

  Medium4.1
• CVE-2024-48885

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder…

  Fortinet · FortiVoice

  Medium5.2
• CVE-2024-46664

  A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the…

  Fortinet · FortiRecorder

  Medium5.2
• CVE-2024-47566

  A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before…

  Fortinet · FortiRecorder

  Medium4.8
• CVE-2024-56497

  An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0…

  Fortinet · FortiMail

  Medium6.5
• CVE-2022-27488

  A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0…

  Fortinet · FortiVoice

  High7.5