FortiGuard Labs | FortiGuard Center - IR Advisories

XSS in default error page

17 days ago

OpenSSL CVE-2025-15467

17 days ago

SSRF in GUI console

17 days ago

SQL injection in forward module

17 days ago

Firewall policy bypass in FSSO Terminal Services Agent

28 days ago

CVSSv3 Score: 3.8 An Improper Verification of Source of a Communication Channel...

Request smuggling attack in FortiOS GUI

28 days ago

CVSSv3 Score: 5.2 An HTTP request smuggling vulnerability [CWE-444] in FortiOS may...

Missing authorization on CSV user import

28 days ago

CVSSv3 Score: 6.8 A missing authorization vulnerability [CWE-862] in FortiAuthenticator may allow...

SSL-VPN Symlink Persistence Patch Bypass

28 days ago

CVSSv3 Score: 5.3 An Exposure of Sensitive Information to an Unauthorized Actor...

Arbitrary XML file write in FCConfig

28 days ago

CVSSv3 Score: 6.4 An Improper Link Resolution Before File Access vulnerability [CWE-59]...

Format String Vulnerability in CAPWAP fast-failover mode

28 days ago

CVSSv3 Score: 6.7 A Use of Externally-Controlled Format String vulnerability [CWE-134] in...

LDAP authentication bypass in Agentless VPN and FSSO

28 days ago

CVSSv3 Score: 7.5 An Authentication Bypass by Primary Weakness vulnerability [CWE-305] in...

XSS via back button

28 days ago

CVSSv3 Score: 7.9 An Improper Neutralization of Input During Web Page Generation...