Fortinet CVE-2024-54026

Fortinet FortiWeb contains a relative path traversal allowing unauthenticated attackers to execute administrative comman

FortiOS and FortiProxy contain an authentication bypass via the Node.js websocket module allowing unauthenticated remote

Fortinet FortiWeb contains an authenticated OS command injection allowing privilege escalation to execute unauthorized c

Fortinet FortiAnalyzer before 5.0.12 and 5.2.x before 5.2.5; FortiSwitch 3.3.x before 3.3.3; FortiCache 3.0.x before 3.0

Buffer overflow in the Cookie parser in Fortinet FortiOS 4.x before 4.1.11, 4.2.x before 4.2.13, and 4.3.x before 4.3.9

OS command injection in Fortinet FortiSandbox 4.4.0-4.4.8 and FortiSandbox PaaS versions 21.3-23.4 enables remote unauth

A product has a SQL injection vulnerability enabling unauthenticated database compromise through improperly neutralized

Remote code execution in Fortinet FortiClientEMS versions 7.4.5 through 7.4.6 allows unauthenticated attackers to execut

Unauthenticated OS command injection in Fortinet FortiSandbox (on-premise, Cloud, and PaaS variants) allows remote attac

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in

Fortinet FortiAnalyzer and FortiManager contain a critical authentication bypass vulnerability (CVE-2026-24858, CVSS 9.8

Authentication bypass in Fortinet FortiOS, FortiProxy, and FortiSwitchManager allows unauthenticated remote attackers to