Sponsored Partner
CrowdStrike Falcon — AI-Native Endpoint ProtectionZero-day tracking and CISA KEV catalog additions impacting Fortinet FortiOS, FortiGate firewalls, and FortiClient endpoints.
Recommended Protective Controls for Fortinet Environments
Deploy continuous behavioral telemetry and micro-segmentation boundaries to shield Fortinet assets.
Fortinet FortiOS, FortiSwitchManager, and FortiSASE contain a heap-based buffer overflow vulnerability that allows an attacker to execute unauthorized code or commands via specially crafted packets. This is a critical threat mapped to CVE-2025-25249; security leaders should validate exposure, prioritize patching, an...
Recommended Tool
Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This is a critical threat mapped to CVE-2025-68686; security leaders should validate exposure, prioritize patching, and verify compensating controls.
Recommended Tool
Fortinet FortiSandbox, FortiSandbox Cloud, and FortiSandbox PaaS contain an OS command injection vulnerability that allows an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests. This is a critical threat mapped to CVE-2026-25089; security leaders should validate exposure...
Recommended Tool
Fortinet FortiSandbox contains an OS command injection vulnerability that could allow an unauthenticated attacker to execute unauthorized code or commands via crafted HTTP requests. This is a critical threat mapped to CVE-2026-39808; security leaders should validate exposure, prioritize patching, and verify compensa...
Recommended Tool
Fortinet FortiClient EMS contains a SQL injection vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests. This is a critical threat mapped to CVE-2026-21643; security leaders should validate exposure, prioritize patching, and verify co...
Recommended Tool
Fortinet FortiClient EMS contains an improper access control vulnerability that may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. This is a critical threat mapped to CVE-2026-35616; security leaders should validate exposure, prioritize patching, and verify compensat...
Recommended Tool
Fortinet FortiAnalyzer, FortiManager, FortiOS, and FortiProxy contain an authentication bypass using an alternate path or channel that could allow an attacker with a FortiCloud account and a registered device to log into other devices registered to other accounts, if FortiCloud SSO authentication is enabled on those...
Recommended Tool
Fortinet FortiOS, FortiSwitchMaster, FortiProxy, and FortiWeb contain an improper verification of cryptographic signature vulnerability that may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML message. This is a critical threat mapped to CVE-2025-59719, CVE-2025...
Recommended Tool
Fortinet FortiWeb contains an OS command Injection vulnerability that may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or CLI commands. This is a critical threat mapped to CVE-2025-58034; security leaders should validate exposure, prioritize patching...
Recommended Tool
Fortinet FortiWeb contains a relative path traversal vulnerability that may allow an unauthenticated attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests. This is a critical threat mapped to CVE-2025-64446; security leaders should validate exposure, prioritize patching, and ve...
Recommended Tool
Subscribe to the SecOps Pulse executive threat briefing for early warnings on unpatched vulnerabilities.
Top critical & high-severity threats, every week.
No spam. Unsubscribe anytime. SecOpsPulse may include sponsored security tool recommendations.