FortiManager vulnerabilities

85 known vulnerabilities in FortiManager from Fortinet. 85 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  FortiManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-61625Nov 10, 2026Fortinet

  An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.11, FortiManager 7.6.0 through 7.6.4, FortiManager

• 7.2 High severity

  FortiManager Cloud: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-23707Oct 13, 2026Fortinet

  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud 7

• 7.2 High severity

  FortiAnalyzer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-23705Oct 13, 2026Fortinet

  An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.13, FortiManager 7.4.

• 8.1 High severity

  FortiManager: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-70468Aug 12, 2026Fortinet

  A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5, FortiManager Cloud 7.

• 7.2 High severity

  FortiManager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-61848Apr 14, 2026Fortinet

  An improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyze

• 7.2 High severity

  FortiAnalyzer: Authentication Bypass Using an Alternate Path or Channel

  CVE-2026-22572Mar 10, 2026Fortinet

  An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.2 through 7.2.12, FortiManager 7.6.0 through 7.6.3, FortiManager 7.4.0 through 7.4.7,

• 7.2 High severity

  FortiManager Cloud: Use of Externally-Controlled Format String

  CVE-2025-68648Mar 10, 2026Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 th

• 8.1 High severity

  FortiManager: Out-of-bounds Write

  CVE-2025-54820Mar 10, 2026Fortinet

  A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via

• 7.2 High severity

  FortiAnalyzer: Hidden Functionality

  CVE-2025-48418Mar 10, 2026Fortinet

  A hidden functionality vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.3, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2.0 through 7.2.10, FortiAnalyzer 7.0.0 through 7.0.14, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnaly

• 9.8 Critical severity

  Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Exploited

  CVE-2026-24858Jan 27, 2026FortinetEPSS 86.6%

  An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.5, FortiAnalyzer 7.4.0 through 7.4.9, FortiAnalyzer 7.2.0 through 7.2.11, FortiAnalyzer 7.0.0 through 7.0.15, FortiMan

• 7.2 High severity

  FortiManager: Heap-based Buffer Overflow

  CVE-2024-50571Oct 14, 2025Fortinet

  A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions,

• 7.5 High severity

  FortiOS: Channel Accessible by Non-Endpoint

  CVE-2024-50565Apr 8, 2025Fortinet

  A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15 and 6.2.0 through 6.2.16, Fortinet FortiProxy version

• 7.5 High severity

  FortiProxy: Improper Restriction of Communication Channel to Intended Endpoints

  CVE-2024-26013Apr 8, 2025Fortinet

  A improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in Fortinet FortiOS version 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15 and before 6.2.16, Fortinet FortiProxy version 7.4.0

• 9.8 Critical severity

  FortiSwitchManager: Buffer Underwrite

  CVE-2023-25610Mar 24, 2025FortinetEPSS 18.3%

  A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2

• 8.8 High severity

  FortiManager: Improper Neutralization of Special Elements used in a Command

  CVE-2024-46662Mar 14, 2025FortinetEPSS 2.27%

  A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted pac

• 7.2 High severity

  FortiAnalyzer: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-40584Feb 11, 2025FortinetEPSS 2.01%

  An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiAnalyzer version 7.4.0 through 7.4.3, 7.2.0 through 7.2.5, 7.0.0 through 7.0.13, 6.4.0 through 6.4.15 and 6.2.2 through 6.2.13

• 7.7 High severity

  FortiManager: Use of Hard-coded Cryptographic Key

  CVE-2024-33504Feb 11, 2025Fortinet

  A use of hard-coded cryptographic key to encrypt sensitive data vulnerability [CWE-321] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.5, 7.2.0 through 7.2.9, 7.0 all versions, 6.4 all versions may allow an attacker with JSON API access permissions to

• 9.8 Critical severity

  FortiAnalyzer: Weak Authentication

  CVE-2024-50563Jan 16, 2025Fortinet

  A weak authentication in Fortinet FortiManager Cloud, FortiAnalyzer versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiAnalyzer Cloud versions 7.4.1 through 7.4.3, FortiManager versions 7.6.0 through 7.6.1, 7.4.1 through 7.4.3, FortiManager Cloud versions

• 7.8 High severity

  FortiAnalyzer Cloud: Incorrect Privilege Assignment

  CVE-2024-45331Jan 16, 2025Fortinet

  A incorrect privilege assignment vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.2, FortiAnalyzer Cloud 7.2.1

• 8.8 High severity

  FortiManager: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-50566Jan 14, 2025FortinetEPSS 1.1%

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiManager Cloud 7.6.0 through 7.6.1, FortiManager Cloud 7.4.0 through 7.4.4, FortiManager Cloud 7.2.2 through 7.2.7, FortiManager 7.6.0 th

• 9.8 Critical severity

  FortiOS: Weak Authentication

  CVE-2024-48886Jan 14, 2025Fortinet

  A weak authentication in Fortinet FortiOS versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.8, 7.0.0 through 7.0.15, 6.4.0 through 6.4.15, FortiProxy versions 7.4.0 through 7.4.4, 7.2.0 through 7.2.10, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, FortiManager ver

• 9.1 Critical severity

  FortiOS: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-48884Jan 14, 2025FortinetEPSS 15.2%

  A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1 through 7.4.3, FortiOS 7.6.0, FortiOS 7.4.0 through 7.4.4, F

• 9.8 Critical severity

  FortiManager: Operation on a Resource after Expiration or Release

  CVE-2024-47571Jan 14, 2025Fortinet

  An operation on a resource after expiration or release in Fortinet FortiManager 6.4.12 through 7.4.0 allows an attacker to gain improper access to FortiGate via valid credentials.

• 7.2 High severity

  FortiManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-36512Jan 14, 2025FortinetEPSS 1.39%

  An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer 7.4.0 through 7.4.3 and 7.2.0 through 7.2.5 and 7.0.2 through 7.0.12 and 6.2.10 through 6.2.13 allows attacker to execute unauthorized cod

• 7.5 High severity

  FortiManager: Missing Authentication for Critical Functionality

  CVE-2024-35277Jan 14, 2025Fortinet

  A missing authentication for critical function in Fortinet FortiPortal version 6.0.0 through 6.0.15, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to access to the configuration of the

• 9.8 Critical severity

  FortiAnalyzer: Out-of-bounds Write

  CVE-2024-35276Jan 14, 2025Fortinet

  A stack-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.4.0 through 7.4.3, FortiAnalyzer 7.2.0 through 7.2.5, FortiAnalyzer 7.0.0 through 7.0.12, FortiAnalyzer 6.4.0 through 6.4.14, FortiAnalyzer Cloud 7.4.1 through 7.4.3, FortiAnalyzer Cloud 7

• 8.8 High severity

  FortiManager: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-35275Jan 14, 2025Fortinet

  A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, FortiManager version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http request

• 8.8 High severity

  FortiAnalyzer: Out-of-bounds Write

  CVE-2024-35273Jan 14, 2025Fortinet

  A out-of-bounds write in Fortinet FortiManager version 7.4.0 through 7.4.2, FortiAnalyzer version 7.4.0 through 7.4.2 allows attacker to escalation of privilege via specially crafted http requests.

• 7.8 High severity

  FortiManager Cloud: Incorrect Privilege Assignment

  CVE-2024-33503Jan 14, 2025Fortinet

  A improper privilege management vulnerability in Fortinet FortiManager Cloud 7.4.1 through 7.4.3, FortiManager Cloud 7.2.1 through 7.2.5, FortiManager Cloud 7.0 all versions, FortiManager 7.4.0 through 7.4.3, FortiManager 7.2.0 through 7.2.5, FortiManager 7.0

• 7.2 High severity

  FortiManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-33502Jan 14, 2025FortinetEPSS 1.33%

  An improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiManager, FortiAnalyzer versions 7.4.0 through 7.4.2 and 7.2.0 through 7.2.5 and 7.0.0 through 7.0.12 and 6.4.0 through 6.4.14 and 6.2.0 through 6.2.12 and 6.0.0

• 7.2 High severity

  FortiManager: Improper Neutralization of Special Elements used in an OS Command

  CVE-2024-48889Dec 18, 2024FortinetEPSS 1.66%

  An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in FortiManager version 7.6.0, version 7.4.4 and below, version 7.2.7 and below, version 7.0.12 and below, version 6.4.14 and below and FortiMa

• 7.3 High severity

  FortiAnalyzer: Out-of-bounds Write

  CVE-2024-33505Nov 12, 2024Fortinet

  A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allow

• 9.8 Critical severity

  FortiManager: Missing Authentication for Critical Functionality

  CVE-2024-26011Nov 12, 2024Fortinet

  A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 throug

• 8.8 High severity

  FortiManager: Client-Side Enforcement of Server-Side Security

  CVE-2024-23666Nov 12, 2024FortinetEPSS 2.33%

  A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0.1 through 7.0.6 and 6.4.5 through 6.4.7 and 6.2.5, FortiManager version 7.4.0 through 7.4.1 and 7.2.0 through 7.2.4 and 7

• 9.8 Critical severity

  Fortinet FortiManager Missing Authentication Exploited

  CVE-2024-47575Oct 23, 2024FortinetEPSS 94.8%

  A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiMan

• 7.8 High severity

  FortiManager: Unverified Password Change

  CVE-2024-21757Aug 13, 2024Fortinet

  A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4

• 9.8 Critical severity

  FortiManager: Improper Access Control

  CVE-2023-36554Mar 12, 2024Fortinet

  A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requ

• 8.8 High severity

  FortiManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2023-42791Feb 20, 2024FortinetEPSS 3.99%

  A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.0.8 and 6.4.0 through 6.4.12 and 6.2.0 through 6.2.11 allows attacker to execute unauthorized code or commands via crafted HTTP requests.

• 7.1 High severity

  FortiAnalyzer: Improper Neutralization of Special Elements used in an OS Command

  CVE-2023-41838Oct 10, 2023Fortinet

  An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker to execute unauthorized code or commands via FortiManager cli.

• 9.6 Critical severity

  FortiManager: Improper Access Control

  CVE-2023-41679Oct 10, 2023Fortinet

  An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all versions, 6.0 all versions may allow a remote and authenticated attacker with at least "device manag