Advisory hub
Fortinet Vulnerabilities: FortiOS, FortiGate, FortiMail and More
8 advisories
FortiOS and the wider Fortinet product line run the SSL-VPN and firewall edge for a large share of mid-size enterprises, and Fortinet flaws are among the most frequent entries in the CISA KEV catalog. Several have been used for initial access by ransomware affiliates and state-aligned groups.
The table lists the Fortinet advisories we have covered, newest first. Fortinet's PSIRT publishes fixed versions per product branch; the linked stories list the branch-by-branch upgrade path and any interim workaround.
Advisories
| ID | Product & issue | Severity | KEV | Fix | Published |
|---|---|---|---|---|---|
| CVE-2026-14851 | Fortinet FortiOS Token Leak | High | No | FortiOS 7.4.5, 7.2.9, 7.6.1; FortiProxy 7.4.3 | |
| CVE-2026-104286 | Fortinet FortiMail RCE | Critical | No | Vendor advisory | |
| CVE-2026-26084 | Fortinet FortiSandbox Exposure | High | No | Vendor advisory | |
| CVE-2026-84388 | Fortinet FortiPAM Auth Bypass | Critical | No | Vendor advisory | |
| CVE-2026-25089 | Fortinet FortiSandbox RCE | Critical | No | See remediation | |
| CVE-2025-68686 | Fortinet FortiOS SSL-VPN Leak | High | Yes | Vendor advisory | |
| CVE-2026-35616 | Fortinet EMS Auth Bypass | Critical | No | See remediation | |
| — | Twelve Zero-Days Weaponized in One Week Across Citrix, Cisco and Fortinet | Critical | Yes | Vendor advisory |
KEV: listed in CISA's Known Exploited Vulnerabilities catalog. “No” means not listed when we published, not that the flaw is safe to defer.
You're on the list.
We'll email you when the next issue goes out.
Free newsletter
The Daily Brief
The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.
- Exploited CVEs, with affected products and patch status
- Patch priorities ranked by real-world exploitation
- Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2
Free