Fortinet

2 advisories tracked · FortiGuard PSIRT Advisories · checked automatically every minute

Check if your Fortinet device is affected

Pick your product and enter the exact software release it runs. We match it against the affected/fixed versions in Fortinet's recent advisories.

Official source

FortiGuard PSIRT Advisories

Polled via the official FortiGuard PSIRT RSS feed (filestore.fortinet.com). PSIRT pages are fetched for new items to extract affected and fixed versions.

Visit Fortinet security advisories

Latest Fortinet advisories

All severities critical high medium low

All platforms FortiGate Firewalls FortiOS FortiManager FortiAnalyzer FortiWeb FortiClient FortiProxy FortiNAC

Critical9.1Fortinet Exploited CISA KEV Updated

API authentication and authorization bypass

CVSSv3 Score: 9.1 An Improper Access Control vulnerability [CWE-284] in FortiClient EMS may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests.Fortinet has observed this to be exploited in the wild and urges vulnerable customers to install the hotfix for FortiClient EMS 7.4.5 and 7.4.6, by following the instructio…

CVE-2026-35616

FortiClient

Apr 4, 2026

Critical9.8Fortinet Exploited CISA KEV

improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet For…

An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiClientEMS 7.4.4 may allow an unauthenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.