{"schema_version":"1","data":[{"id":3557,"advisory_id":"adaae2b3-60cd-45c4-aa35-0b08d553ef1a","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2020-12812","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:31.67782+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2020-12812"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","summary":"Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2020-12812","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2020-12812","aliases":["CVE-2020-12812"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-178","CWE-287"],"cveID":"CVE-2020-12812","notes":"https://nvd.nist.gov/vuln/detail/CVE-2020-12812","dueDate":"2022-05-03","product":"FortiOS","dateAdded":"2021-11-03","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Fortinet FortiOS SSL VPN contains an improper authentication vulnerability that may allow a user to login successfully without being prompted for the second factor of authentication (FortiToken) if they change the case in their username.","vulnerabilityName":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2020-12812","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3556,"advisory_id":"a417825b-9699-4a52-a5d6-ace3eb722fe7","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-13379","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:31.117361+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2018-13379"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","summary":"Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2018-13379","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2018-13379","aliases":["CVE-2018-13379"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-22"],"cveID":"CVE-2018-13379","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-13379","dueDate":"2022-05-03","product":"FortiOS","dateAdded":"2021-11-03","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Fortinet FortiOS SSL VPN web portal contains a path traversal vulnerability that may allow an unauthenticated attacker to download FortiOS system files through specially crafted HTTP resource requests.","vulnerabilityName":"Fortinet FortiOS SSL VPN Path Traversal Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2018-13379","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":3555,"advisory_id":"97e2959e-df34-44eb-ab6e-c1d1de64ea6f","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-5591","source_published_at":"2021-11-03T00:00:00+00:00","published_at":"2026-10-24T21:37:30.535488+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2019-5591"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Default Configuration Vulnerability","summary":"Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2019-5591","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-5591","aliases":["CVE-2019-5591"],"affected":[],"modified":"2021-11-03T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-306"],"cveID":"CVE-2019-5591","notes":"https://nvd.nist.gov/vuln/detail/CVE-2019-5591","dueDate":"2022-05-03","product":"FortiOS","dateAdded":"2021-11-03","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.","vulnerabilityName":"Fortinet FortiOS Default Configuration Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-5591","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":2952,"advisory_id":"f8f2ecdd-bd61-4418-ace3-8200bafa6dee","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2021-44168","source_published_at":"2021-12-10T00:00:00+00:00","published_at":"2026-10-24T21:26:47.490522+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2021-44168"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Arbitrary File Download","summary":"Fortinet FortiOS \"execute restore src-vis\" downloads code without integrity checking, allowing an attacker to arbitrarily download files. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2021-44168","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2021-44168","aliases":["CVE-2021-44168"],"affected":[],"modified":"2021-12-10T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-494"],"cveID":"CVE-2021-44168","notes":"https://nvd.nist.gov/vuln/detail/CVE-2021-44168","dueDate":"2021-12-24","product":"FortiOS","dateAdded":"2021-12-10","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Fortinet FortiOS \"execute restore src-vis\" downloads code without integrity checking, allowing an attacker to arbitrarily download files.","vulnerabilityName":"Fortinet FortiOS Arbitrary File Download","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2021-44168","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1393,"advisory_id":"a1001488-5285-4b4d-b72b-e9b0653daeb2","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-42475","source_published_at":"2022-12-13T00:00:00+00:00","published_at":"2026-10-24T21:02:00.702859+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2022-42475"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","summary":"Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-42475","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-42475","aliases":["CVE-2022-42475"],"affected":[],"modified":"2022-12-13T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-197"],"cveID":"CVE-2022-42475","notes":"https://www.fortiguard.com/psirt/FG-IR-22-398;  https://nvd.nist.gov/vuln/detail/CVE-2022-42475","dueDate":"2023-01-03","product":"FortiOS","dateAdded":"2022-12-13","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Multiple versions of Fortinet FortiOS SSL-VPN contain a heap-based buffer overflow vulnerability which can allow an unauthenticated, remote attacker to execute arbitrary code or commands via specifically crafted requests.","vulnerabilityName":"Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2022-42475","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1365,"advisory_id":"3e7d5c15-b382-43b1-8383-274989d5a6b5","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2022-41328","source_published_at":"2023-03-14T00:00:00+00:00","published_at":"2026-10-24T21:01:43.226946+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2022-41328"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Path Traversal Vulnerability","summary":"Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands. CISA required action: Apply updates per vendor instructions.","evidence":"kev:CVE-2022-41328","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2022-41328","aliases":["CVE-2022-41328"],"affected":[],"modified":"2023-03-14T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-22"],"cveID":"CVE-2022-41328","notes":"https://www.fortiguard.com/psirt/FG-IR-22-369;  https://nvd.nist.gov/vuln/detail/CVE-2022-41328","dueDate":"2023-04-04","product":"FortiOS","dateAdded":"2023-03-14","vendorProject":"Fortinet","requiredAction":"Apply updates per vendor instructions.","known_exploited":true,"shortDescription":"Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.","vulnerabilityName":"Fortinet FortiOS Path Traversal Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2022-41328","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":1180,"advisory_id":"0d4269f7-620d-424b-92cb-843f3e7b2c68","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21762","source_published_at":"2024-02-09T00:00:00+00:00","published_at":"2026-10-24T20:57:22.206798+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2024-21762"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Out-of-Bound Write Vulnerability","summary":"Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2024-21762","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2024-21762","aliases":["CVE-2024-21762"],"affected":[],"modified":"2024-02-09T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-787"],"cveID":"CVE-2024-21762","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-24-015 ;   https://nvd.nist.gov/vuln/detail/CVE-2024-21762","dueDate":"2024-02-16","product":"FortiOS","dateAdded":"2024-02-09","vendorProject":"Fortinet","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Fortinet FortiOS contains an out-of-bound write vulnerability that allows a remote unauthenticated attacker to execute code or commands via specially crafted HTTP requests.","vulnerabilityName":"Fortinet FortiOS Out-of-Bound Write Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2024-21762","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":388,"advisory_id":"4171613e-078d-4d34-8a67-cfcdd73a1079","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2019-6693","source_published_at":"2025-06-25T00:00:00+00:00","published_at":"2026-10-24T20:44:56.88392+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2019-6693"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","summary":"Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","evidence":"kev:CVE-2019-6693","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2019-6693","aliases":["CVE-2019-6693"],"affected":[],"modified":"2025-06-25T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-798"],"cveID":"CVE-2019-6693","notes":"https://fortiguard.com/advisory/FG-IR-19-007 ; https://nvd.nist.gov/vuln/detail/CVE-2019-6693","dueDate":"2025-07-16","product":"FortiOS","dateAdded":"2025-06-25","vendorProject":"Fortinet","requiredAction":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","known_exploited":true,"shortDescription":"Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key. ","vulnerabilityName":"Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability","knownRansomwareCampaignUse":"Known"}},"related_cves":[{"value":"CVE-2019-6693","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}},{"id":102,"advisory_id":"1151283b-7102-4b67-9972-6b876aa0af59","revision":1,"source_id":"core-kev","source_url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-68686","source_published_at":"2026-07-27T00:00:00+00:00","published_at":"2026-10-24T20:40:27.386454+00:00","extraction_method":"structured","technologies":["core-kev","fortios"],"cve_ids":["CVE-2025-68686"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","summary":"Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level. CISA required action: Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","evidence":"kev:CVE-2025-68686","products":[{"name":{"value":"FortiOS","evidence":"/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"unknown","structured":{"id":"CVE-2025-68686","aliases":["CVE-2025-68686"],"affected":[],"modified":"2026-07-27T00:00:00.000Z","provider":"kev","references":["https://www.cisa.gov/known-exploited-vulnerabilities-catalog"],"exploitation":{"cwes":["CWE-200"],"cveID":"CVE-2025-68686","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686","dueDate":"2026-08-10","product":"FortiOS","dateAdded":"2026-07-27","vendorProject":"Fortinet","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_exploited":true,"shortDescription":"Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.","vulnerabilityName":"Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability","knownRansomwareCampaignUse":"Unknown"}},"related_cves":[{"value":"CVE-2025-68686","evidence":"/cveID"}],"security_relevant":true,"severity_evidence":null}}],"next_after":3557,"next_before":102}