APT hacked a US municipal government via an unpatched Fortinet VPNSecurity Affairs·May 27, 21:25 UTC · May 27, 2021VulnerabilityCVE-2018-13379CVE-2020-12812CVE-2019-559147
FBI and CISA are warning of APT actors targeting Fortinet FortiOS serversSecurity Affairs·Apr 2, 21:19 UTC · Apr 2, 2021VulnerabilityCVE-2018-13379CVE-2020-12812CVE-2019-5591+1 CVEs60
Fortinet Patches Critical SQLi Flaw Enabling Unauthenticated Code ExecutionThe Hacker News·Feb 10, 13:59 UTC · Feb 10, 2026Vulnerability in the wildCVE-2026-21643CVE-2026-2485860
Arctic Wolf detects surge in automated Fortinet FortiGate Firewall configuration attacksSecurity Affairs·Jan 22, 11:00 UTC · Jan 22, 2026VulnerabilityCVE-2025-59718CVE-2025-5971960
CVE-2022-42475: Fortinet Pre-authentication Code-execution VulnerabilityRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability in the wildCVE-2022-42475160
Symbolic Link trick lets attackers bypass FortiGate patches, Fortinet warnsSecurity Affairs·Apr 12, 17:17 UTC · Apr 12, 2025VulnerabilityCVE-2022-42475CVE-2023-27997CVE-2024-2176235
Critical Fortinet FortiSwitch flaw allows remote attackers to change admin passwordsSecurity Affairs·Apr 9, 17:51 UTC · Apr 9, 2025VulnerabilityCVE-2024-48887CVE-2024-2601060
CISA warns of exploited Fortinet bugs as Microsoft issues its biggest Patch Tuesday in yearsThe Record·Jan 17, 01:12 UTC · Jan 17, 2025Vulnerability in the wildCVE-2024-55591CVE-2025-21333CVE-2025-2133460
Fortinet Warns of Critical FortiWLM Flaw That Could Lead to Admin Access ExploitsThe Hacker News·Dec 23, 05:21 UTC · Dec 23, 2024VulnerabilityCVE-2023-34990CVE-2023-48782CVE-2024-4888960
Fortinet expands GenAI capabilities across its portfolio with two new additionsHelp Net Security·Nov 7, 00:00 UTC · Nov 7, 2024Vulnerability30
Critical Patches Released for New Flaws in Cisco, Fortinet, VMware ProductsThe Hacker News·May 29, 12:58 UTC · May 29, 2024VulnerabilityCVE-2024-20252CVE-2024-20254CVE-2024-20255+9 CVEs60
Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS SoftwareThe Hacker News·Mar 22, 03:02 UTC · Mar 22, 2024Vulnerability in the wildCVE-2023-48788CVE-2023-42789CVE-2023-42790160
Critical Fortinet FortiOS bug CVE-2024-21762 potentially impact 150,000 internetSecurity Affairs·Mar 12, 14:56 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-2176260
Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPNSecurity Affairs·Feb 9, 09:05 UTC · Feb 9, 2024Vulnerability in the wildCVE-2024-21762CVE-2024-23113CVE-2022-4247560
Fortinet addressed two critical FortiSIEM vulnerabilitiesSecurity Affairs·Feb 7, 18:50 UTC · Feb 7, 2024VulnerabilityCVE-2024-23108CVE-2024-23109CVE-2023-3499260
New Fortinet's FortiNAC Vulnerability Exposes Networks to Code Execution AttacksThe Hacker News·Jun 27, 05:35 UTC · Jun 27, 2023Vulnerability in the wildCVE-2023-33299CVE-2023-33300CVE-2023-27997+2 CVEs60
Fortinet fixed a critical vulnerability in its Data Analytics productSecurity Affairs·Apr 13, 10:30 UTC · Apr 13, 2023VulnerabilityCVE-2022-41331CVE-2022-43955CVE-2022-27487+1 CVEs60
Fortinet plugs RCE hole in FortiManager and FortiAnalyzer (CVE-2021-32589)Help Net Security·Jul 21, 00:00 UTC · Jul 21, 2021Vulnerability in the wildCVE-2021-3258960
Comcast Business, Fortinet and Akamai drive innovation in cloud-based cybersecurity solutionsHelp Net Security·Sep 9, 00:00 UTC · Sep 9, 2019Vulnerability55
November 2025 CVE Landscape: 10 Critical Vulnerabilities Show 69% Drop from OctoberRecorded Future·Dec 10, 00:00 UTC · Dec 10, 2025Vulnerability in the wildCVE-2025-64446CVE-2025-58034CVE-2025-21042+1 CVEs60
FortiJump flaw CVE-2024-47575 has been exploited in zeroSecurity Affairs·Oct 24, 11:08 UTC · Oct 24, 2024Vulnerability in the wildCVE-2024-4757560
Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)Help Net Security·Jun 24, 10:29 UTC · Jun 24, 2026Vulnerability in the wildCVE-2026-2164360
Critical fortinet vulnerabilities fixed in FortiSandbox and FortiAuthenticatorSecurity Affairs·May 13, 06:23 UTC · May 13, 2026Vulnerability in the wildCVE-2026-44277CVE-2026-2608360
Fortinet expands FortiCNAPP with network, data, and runtime-aware risk prioritizationHelp Net Security·Jan 28, 00:00 UTC · Jan 28, 2026Vulnerability30
Fortinet Confirms Active FortiCloud SSO Bypass on Fully Patched FortiGate FirewallsThe Hacker News·Jan 23, 12:30 UTC · Jan 23, 2026VulnerabilityCVE-2025-59718CVE-2025-5971935
Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code ExecutionThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026VulnerabilityCVE-2025-64155CVE-2025-4785560
Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution FlawsThe Hacker News·Dec 10, 09:13 UTC · Dec 10, 2025VulnerabilityCVE-2025-59718CVE-2025-59719CVE-2025-10573+6 CVEs60
Fortinet Releases Patch for Critical SQL Injection Flaw in FortiWeb (CVE-2025The Hacker News·Jul 12, 06:33 UTC · Jul 12, 2025VulnerabilityCVE-2025-25257CVE-2025-20286CVE-2025-20281+1 CVEs60
Fortinet Urges FortiSwitch Upgrades to Patch Critical Admin Password Change FlawThe Hacker News·Apr 8, 17:53 UTC · Apr 8, 2025VulnerabilityCVE-2024-4888760
Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLMSecurity Affairs·Dec 19, 13:53 UTC · Dec 19, 2024VulnerabilityCVE-2023-34990CVE-2023-4878260
Fortinet releases patches for publicly undisclosed critical FortiManager vulnerabilityHelp Net Security·Oct 24, 15:15 UTC · Oct 24, 2024VulnerabilityCVE-2024-2311360
Tens of thousands of IPs vulnerable to Fortinet flaw dubbed 'must patch' by fedsCyberScoop·Oct 14, 16:22 UTC · Oct 14, 2024Vulnerability in the wild60
Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022The Record·Aug 3, 14:44 UTC · Aug 3, 2023VulnerabilityCVE-2021-44228CVE-2021-40539CVE-2018-13379+8 CVEs60
Fortinet plugs critical RCE hole in FortiOS, FortiProxy (CVE-2023-25610)Help Net Security·Mar 9, 00:00 UTC · Mar 9, 2023Vulnerability in the wildCVE-2023-2561060
Fortinet Issues Patches for 40 Flaws Affecting FortiWeb, FortiOS, FortiNAC, and FortiProxyThe Hacker News·Feb 23, 03:50 UTC · Feb 23, 2023Vulnerability in the wildCVE-2022-39952CVE-2021-4275660
Suspected Chinese hackers exploit vulnerability in Fortinet devicesThe Record·Feb 3, 00:00 UTC · Feb 3, 2023VulnerabilityCVE-2022-4247560
Fortinet fixed command injection bugs in FortiADC and FortiTesterSecurity Affairs·Jan 4, 15:17 UTC · Jan 4, 2023Vulnerability in the wildCVE-2022-39947CVE-2022-3584560
Unpatched Fortinet FortiWeb vulnerability allows remote OS command injectionHelp Net Security·Aug 17, 00:00 UTC · Aug 17, 2021VulnerabilityCVE-2021-2212335
CISA: Patch These Three Fortinet Bugs Now to Avoid CompromiseInfosecurity Magazine·Apr 6, 10:45 UTC · Apr 6, 2021Vulnerability in the wildCVE-2020-12812CVE-2019-559160