Advisories

Vendor and authority advisories

Security advisories published by software and hardware vendors and national cyber authorities, in one place.

Updated automatically every 6 hours. Last update 2 Nov 2026, 11:34 IST · 7 sources · Get these by email

Threats, ransomware & breaches Cron Job Injection in Remote BackupCVSSv3 Score: 6.7 An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] in FortiSandbox may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Network & security devices Improper Authentication of FortiPAM ServerCVSSv3 Score: 9.6 An improper authentication vulnerability [CWE-287] in the Fortinet Privileged Access Agent Chrome Extension may allow a remote unauthenticated attacker to proxy a user's browser traffic through attacker controlled servers if the user visits a malicious website. Revised on… Fortinet PSIRT · Global · 8 Sep 2026
Threats, ransomware & breaches JWT used for authentication in web GUI signed with static keyCVSSv3 Score: 9.8 An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Network & security devices Null Pointer Dereference in Log ReportCVSSv3 Score: 2.5 A NULL Pointer Dereference vulnerability [CWE-476] in FortiOS, FortiProxy and FortiPAM may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Threats, ransomware & breaches Open Redirect on FortiSIEMCVSSv3 Score: 3.1 An URL redirection to untrusted site ('open redirect') [CWE-601] vulnerability in FortiSIEM may allow an authenticated attacker to cause a redirection to any website via specially crafted HTTP requests Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Threats, ransomware & breaches Broken Access control on Websocket streamsCVSSv3 Score: 5.4 An Improper Access control vulnerability [CWE-284] in FortiSOAR may allow an authenticated attacker with zero permissions to subscribe to websocket streams and topics and to inject broadcast messages to the stream via crafted websocket requests Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Network & security devices Uncontrolled Resource Consumption in SNMPCVSSv3 Score: 6.5 A Use of Uninitialized Variable [CWE-457] vulnerability in Fortinet FortiAnalyzer SNMP daemon may allow a remote authenticated attacker with user permission to cause a denial of service via SNMP GETBULK requests. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Vulnerabilities & exploits Workflow session email approval process bypassCVSSv3 Score: 4.9 An improper access control vulnerability [CWE-284] in FortiManager may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Network & security devices ZTNA Portal Improper Certificate ValidationCVSSv3 Score: 8.1 An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination… Fortinet PSIRT · Global · 8 Sep 2026
Threats, ransomware & breaches Arbitrary process termination from exposed minifilter communication portCVSSv3 Score: 5.1 An Unverified Ownership Vulnerability [CWE-283] in FortiClient Windows fortimon3 driver may allow an authenticated attacker to terminate arbitrary processes via an exposed minifilter communication port. Revised on 2026-09-08 00:00:00 Fortinet PSIRT · Global · 8 Sep 2026
Cloud & SaaS FGFM Authentication Weakening via CLI ConfigurationCVSSv3 Score: 8.1 An Authentication Bypass Using an Alternate Path or Channel [CWE-288] vulnerability in FortiManager and FortiManager Cloud may allow a remote unauthenticated attacker to impersonate any FortiGate managed by the FortiManager with a specific CLI option set via crafted FGFM requests… Fortinet PSIRT · Global · 12 Aug 2026
Threats, ransomware & breaches Content-Encoding WAF EvasionCVSSv3 Score: 5.3 An incomplete list of disallowed inputs [CWE-184] in FortiWeb WAF may allow an unauthenticated attacker to bypass policies via specifically crafted requests. Revised on 2026-08-12 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026
Threats, ransomware & breaches Broken access control in the RADIUS type admin groupCVSSv3 Score: 9.8 An Improper Authentication vulnerability [CWE-287] in the FortiWeb Remote Radius Type Admin Authentication configured with specific, non-default settings may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password Revised on… Fortinet PSIRT · Global · 12 Aug 2026
Network & security devices UI DoS attackCVSSv3 Score: 5.0 An Allocation of Resources Without Limits or Throttling vulnerability [CWE-770] in FortiOS may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests. Revised on 2026-08-12 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026
Network & security devices Stack buffer overflow in WADCVSSv3 Score: 5.6 A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS explicit proxy may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is… Fortinet PSIRT · Global · 12 Aug 2026
Network & security devices Heap overflow in kernel driver due to missing size validationCVSSv3 Score: 7.3 A buffer copy without checking size of input vulnerability [CWE-120] in FortiClient Windows may allow an unauthenticated attacker in a position to alter or craft DNS responses to the targeted host to execute arbitrary code via malicious packets. Revised on 2026-08-12 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026
Threats, ransomware & breaches Server-Side Request Forgery (SSRF)CVSSv3 Score: 3.8 A Server-Side request forgery (SSRF) [CWE-918] vulnerability in FortiSIEM GUI may allow an authenticated attacker to send HTTP requests originating from the targeted device via specially crafted HTTP requests Revised on 2026-08-12 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026
Vulnerabilities & exploits HTTP/2 Bomb CVE-2026-49975CVSSv3 Score: 5.8 CVE-2026-49975Memory Allocation with Excessive Size Value vulnerability in Apache HTTP Server's mod_http leads to denial of service via malicious HTTP requests. This issue affects Apache HTTP Server: from 2.4.17 through 2.4.67. Revised on 2026-08-19 00:00:00 Fortinet PSIRT · Global · 12 Aug 2026
Network & security devices SSL-VPN Reflected XSSCVSSv3 Score: 6.1 An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiOS, FortiProxy, FortiPAM and FortiSwitch-Manager Agentless SSL-VPN may allow an authenticated remote user to execute code or commands via crafted requests.… Fortinet PSIRT · Global · 14 Jul 2026
Network & security devices Header injection in Web Filter warning pageCVSSv3 Score: 3.4 An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] in FortiOS and FortiProxy may allow an attacker in possession of a valid web filter override token to inject arbitrary headers via tricking a user into clicking on a… Fortinet PSIRT · Global · 14 Jul 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.