Fortinet security advisories, April 2026

Every Fortinet security advisory published in April 2026, from FortiGuard PSIRT Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 28
Critical: 3
High: 3
In CISA KEV: 3
CVEs: 28

Fortinet advisories published in April 2026

Apr 15, 2026
Medium [CVE-2026-40688] Out-Of-Bounds Write in administrative interface
Medium6.7
Apr 14, 2026
Critical [CVE-2026-39808] OS Command Injection through API endpoint
Critical9.1ExploitedCISA KEV
Apr 14, 2026
Critical [CVE-2026-39813] Unauthenticated Authentication bypass and Privilege escalation in FortiSandbox
Critical9.1
Apr 14, 2026
High [CVE-2026-22828] Heap-based buffer overflow in oftpd daemon
High7.3
Apr 14, 2026
High [CVE-2026-39809] Multiple SQL Injections
High7.1
Apr 14, 2026
High [CVE-2026-39815] SQL Injection via API
High7.9
Apr 14, 2026
Medium [CVE-2026-23708] 2FA request can be replayed without a valid token after one successful request
Medium6.7
Apr 14, 2026
Medium [CVE-2026-25691] Arbitrary directory delete on vmimages delete feature
Medium6.2
Apr 14, 2026
Medium [CVE-2026-22574] Clear-text credentials retrievable with IP modification for LDAP
Medium4.1
Apr 14, 2026
Medium [CVE-2026-22576] Clear-text credentials retrievable with IP modification for connectors
Medium4.1
Apr 14, 2026
Medium [CVE-2026-21742 +1] Cleartext Credentials in response for API endpoints
Medium6.2
Apr 14, 2026
Medium [CVE-2026-39810] Hardcoded symmetric encryption key for Postgresql
Medium5.2
Apr 14, 2026
Medium [CVE-2026-39811] Integer Overflow Denial of Service in administrative interface
Medium4.4
Apr 14, 2026
Medium [CVE-2025-53847] Missing Authentication for critical function in CAPWAP daemon
Medium6.2
Apr 14, 2026
Medium [CVE-2026-39814] Multiple Path traversals in CLI
Medium6.2
Apr 14, 2026
Medium [CVE-2026-39812] Multiple Stored XSS
Medium4.3
Apr 14, 2026
Medium [CVE-2025-61624] Path Traversal in CLI
Medium5.4ExploitedCISA KEV
Apr 14, 2026
Medium [CVE-2025-68649] Path Traversal in CLI
Medium5.4
Apr 14, 2026
Medium [CVE-2026-22573] Path Traversal on File Content Extraction connector
Medium6.2
Apr 14, 2026
Medium [CVE-2025-61886] Reflected XSS in Operation Center
Medium4.9
Apr 14, 2026
Medium [CVE-2025-61848] SQL Injection via JSON RPC API
Medium6.8
Apr 14, 2026
Medium [CVE-2025-59809] SSRF via Report template and scheduling
Medium4.1
Apr 14, 2026
Medium [CVE-2026-22154] Stored Cross Site Scripting (XSS) in Reports View page
Medium4.4
Apr 14, 2026
Medium [CVE-2024-23104] unauthorized backup file access
Medium5.4
Apr 14, 2026
Low [CVE-2026-27316] Credential disclosure in LDAP configuration web page.
Low2.5
Apr 14, 2026
Low [CVE-2026-21741] Open Redirection via Import CSV option
Low2.2
Apr 14, 2026
Advisory Axios npm Package Compromised
Unrated
Apr 4, 2026
Critical [CVE-2026-35616] API authentication and authorization bypass
Critical9.1ExploitedCISA KEV

Get an email when Fortinet publishes the next one.

See Fortinet's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Fortinet

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.