Is itCheck something

Attack list

Fortinet

32 attacked bugs

Yes. Attackers are using Fortinet bugs right now.

What to do

Ask whoever runs it (your web host or IT team) to install the vendor's latest security update now.

Attackers keep using these against anything that hasn't updated. Updating closes them.

BugConfirmed in attacks

  1. Fortinet admin accounts can write or delete any fileCVE-2025-61624Oct 16, 2026
  2. Attackers can plant files on Fortinet FortiMail serversCVE-2026-104286Oct 1, 2026
  3. Fortinet bug: heap-based buffer overflowCVE-2025-25249Sep 9, 2026
  4. Fortinet FortiOS bug: exposure of sensitive information to an unauthorized actorCVE-2025-68686Jul 27, 2026
  5. Fortinet FortiSandbox bug: OS command injectionCVE-2026-25089Jul 16, 2026
  6. Fortinet FortiSandbox bug: OS command injectionCVE-2026-39808Jul 16, 2026
  7. Fortinet FortiClient EMS bug: SQL injectionCVE-2026-21643Apr 13, 2026
  8. Fortinet FortiClient EMS bug: improper access controlCVE-2026-35616Apr 6, 2026
  9. Fortinet bug: authentication bypass using an alternate path or channelCVE-2026-24858Jan 27, 2026
  10. Fortinet bug: improper verification of cryptographic signatureCVE-2025-59718Dec 16, 2025
  11. Fortinet FortiWeb bug: OS command injectionCVE-2025-58034Nov 18, 2025
  12. Fortinet FortiWeb bug: path traversalCVE-2025-64446Nov 14, 2025
  13. Fortinet FortiWeb bug: SQL injectionCVE-2025-25257Jul 18, 2025
  14. Fortinet FortiOS bug: use of hard-coded credentialsCVE-2019-6693Jun 25, 2025
  15. Fortinet bug: stack-based buffer overflowCVE-2025-32756May 14, 2025
  16. Fortinet FortiOS and FortiProxy bug: fortiproxy authentication bypassCVE-2025-24472Mar 18, 2025
  17. Fortinet FortiOS and FortiProxy bug: fortiproxy authentication bypassCVE-2024-55591Jan 14, 2025
  18. Fortinet FortiManager bug: missing authenticationCVE-2024-47575Oct 23, 2024
  19. Fortinet bug: format stringCVE-2024-23113Oct 9, 2024
  20. Fortinet FortiClient EMS bug: SQL injectionCVE-2023-48788Mar 25, 2024
  21. Fortinet FortiOS bug: out-of-bound writeCVE-2024-21762Feb 9, 2024
  22. Fortinet FortiOS and FortiProxy SSL-VPN bug: fortiproxy ssl-VPN heap-based buffer overflowCVE-2023-27997Jun 13, 2023
  23. Fortinet FortiOS bug: path traversalCVE-2022-41328Mar 14, 2023
  24. Fortinet FortiOS bug: heap-based buffer overflowCVE-2022-42475Dec 13, 2022
  25. Fortinet bug: authentication bypassCVE-2022-40684Oct 11, 2022
  26. Fortinet FortiOS and FortiADC bug: fortiadc improper access controlCVE-2018-13374Sep 8, 2022
  27. Fortinet FortiOS and FortiProxy bug: fortiproxy improper authorizationCVE-2018-13382Jan 10, 2022
  28. Fortinet FortiOS and FortiProxy bug: fortiproxy out-of-bounds writeCVE-2018-13383Jan 10, 2022
  29. Fortinet FortiOS bug: arbitrary file downloadCVE-2021-44168Dec 10, 2021
  30. Fortinet FortiOS bug: default configurationCVE-2019-5591Nov 3, 2021
  31. Fortinet FortiOS bug: ssl VPN improper authenticationCVE-2020-12812Nov 3, 2021
  32. Fortinet FortiOS bug: ssl VPN path traversalCVE-2018-13379Nov 3, 2021

From the US government's list of bugs confirmed in real attacks (CISA KEV). Check everything you use.