FortiGuard Labs | FortiGuard Center - IR Advisories

XSS in default error page

14 days ago

SSRF in GUI console

14 days ago

OpenSSL CVE-2025-15467

14 days ago

SQL injection in forward module

14 days ago

SSL-VPN Symlink Persistence Patch Bypass

25 days ago

CVSSv3 Score: 5.3 An Exposure of Sensitive Information to an Unauthorized Actor...

Arbitrary XML file write in FCConfig

25 days ago

CVSSv3 Score: 6.4 An Improper Link Resolution Before File Access vulnerability [CWE-59]...

LDAP authentication bypass in Agentless VPN and FSSO

25 days ago

CVSSv3 Score: 7.5 An Authentication Bypass by Primary Weakness vulnerability [CWE-305] in...

Format String Vulnerability in CAPWAP fast-failover mode

25 days ago

CVSSv3 Score: 6.7 A Use of Externally-Controlled Format String vulnerability [CWE-134] in...

XSS via back button

25 days ago

CVSSv3 Score: 7.9 An Improper Neutralization of Input During Web Page Generation...

Missing authorization on CSV user import

25 days ago

CVSSv3 Score: 6.8 A missing authorization vulnerability [CWE-862] in FortiAuthenticator may allow...

Request smuggling attack in FortiOS GUI

25 days ago

CVSSv3 Score: 5.2 An HTTP request smuggling vulnerability [CWE-444] in FortiOS may...

Firewall policy bypass in FSSO Terminal Services Agent

25 days ago

CVSSv3 Score: 3.8 An Improper Verification of Source of a Communication Channel...