Fortinet security advisories, May 2026

Every Fortinet security advisory published in May 2026, from FortiGuard PSIRT Advisories, with its severity, CVEs and CISA KEV status. Open a record for affected and fixed versions and the vendor's own link.

Advisories: 12
Critical: 2
High: 2
In CISA KEV: 1
CVEs: 12

Fortinet advisories published in May 2026

May 13, 2026
High [CVE-2026-31431] Linux Kernel Vulnerability - CVE-2026-31431
High7.8ExploitedCISA KEV
May 12, 2026
Critical [CVE-2026-44277] Improper access control on API endpoints
Critical9.8
May 12, 2026
Critical [CVE-2026-26083] Incorrect global authorization
Critical9.8
May 12, 2026
High [CVE-2025-53844] Out-of-bounds access in CAPWAP daemon
High8.3
May 12, 2026
Medium [CVE-2026-25690] Arbitrary log file read in administrative interface
Medium4.3
May 12, 2026
Medium [CVE-2025-53680] Command injection in CLI
Medium6.7
May 12, 2026
Medium [CVE-2025-67604] DoS due to unsafe function in signal handler
Medium5.2
May 12, 2026
Medium [CVE-2025-53870] OS command injection in CLI
Medium6.7
May 12, 2026
Medium [CVE-2026-44279] OTP Disclosure via Exported TokenContentProvider
Medium5.5
May 12, 2026
Medium [CVE-2025-53681] SQL command injection in administrative portal
Medium6.3
May 12, 2026
Medium [CVE-2026-25088] User controlled SQL commands
Medium5.1
May 12, 2026
Low [CVE-2026-44278] Hardcoded Encryption Key Used for VPN Saved Passwords
Low2.3

Get an email when Fortinet publishes the next one.

See Fortinet's last 90 days of advisories first. Then choose one product with live alerts free for life, or a free month of real-time alerts on everything with the severity, the fixed version and the vendor's link (card needed, then US$15/month; we email you before the first charge).

Alert me about Fortinet

Dates are each advisory's publication date at the source, in UTC; a record with no source date is filed under the day VulniPulse first saw it.