Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage
Fortinet

Fortinet FortiSwitch vulnerabilities

9 published CVEs name Fortinet FortiSwitch among the affected products.

Published CVEs
9
Last 12 months
1
Critical
2
Known exploited
0

Critical 2High 2Medium 4Low 1Not scored 0

CVEs per yearBy the year they were published

  1. 20211
  2. 20233
  3. 20254
  4. 20261

Newest CVEs

  • CVE-2026-106175

    A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0…

    Fortinet · FortiOS

    Low2.1
  • CVE-2024-48887

    A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially…

    Fortinet · FortiSwitch

    Critical9.3
  • CVE-2022-23439

    A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests,…

    Fortinet · FortiTester

    Medium4.1
  • CVE-2023-37936

    A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.7 and 6.4.0 through 6.4.13 and 6.2.0…

    Fortinet · FortiSwitch

    Critical9.6
  • CVE-2023-37937

    An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and…

    Fortinet · FortiSwitch

    High7.6
  • CVE-2022-27488

    A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0…

    Fortinet · FortiVoice

    High7.5
  • CVE-2022-27490

    A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, FortiAnalyzer version 6.0.0 through 6.0.4,…

    Fortinet · FortiManager

    Medium5.1
  • CVE-2021-43074

    An improper verification of cryptographic signature vulnerability [CWE-347] in FortiWeb 6.4 all versions, 6.3.16 and below, 6.2 all versions, 6.1 all versions,…

    Fortinet · FortiSwitch

    Medium4.1
  • CVE-2021-42757

    A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to…

    Fortinet · FortiOS

    Medium6.3