Fortinet FortiSwitchManager vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20245
3. 20258
4. 20263

Known exploitedNewest addition to KEV first

• CVE-2025-61624

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…

  Fortinet · FortiOS

  ExploitedMedium5.4
• CVE-2025-25249

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

  Fortinet · FortiSwitchManager

  ExploitedHigh7.4
• CVE-2025-59718

  A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through…

  Fortinet · FortiSwitchManager

  ExploitedCritical9.1
• CVE-2024-23113

  A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions…

  Fortinet · FortiSwitchManager

  ExploitedCritical9.8

Newest CVEs

• CVE-2026-59840

  A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…

  Fortinet · FortiOS

  Medium4.1
• CVE-2025-61624

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0…

  Fortinet · FortiOS

  ExploitedMedium5.4
• CVE-2025-25249

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0…

  Fortinet · FortiSwitchManager

  ExploitedHigh7.4
• CVE-2025-59718

  A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through…

  Fortinet · FortiSwitchManager

  ExploitedCritical9.1
• CVE-2024-26008

  An improper check or handling of exceptional conditions vulnerability [CWE-703] in FortiOS version 7.4.0 through 7.4.3 and before 7.2.7, FortiProxy version…

  Fortinet · FortiProxy

  Medium5.0
• CVE-2025-22258

  A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through…

  Fortinet · FortiPAM

  Medium5.7
• CVE-2025-49201

  A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM…

  Fortinet · FortiPAM

  High7.4
• CVE-2024-26009

  An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16,…

  Fortinet · FortiProxy

  High7.9
• CVE-2025-22252

  A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions…

  Fortinet · FortiProxy

  Critical9.0
• CVE-2023-25610

  A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through…

  Fortinet · FortiSwitchManager

  Critical9.3