FortiSwitchManager vulnerabilities

15 known vulnerabilities in FortiSwitchManager from Fortinet. 14 are rated high or critical, and 5 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.5 Medium severity

  Fortinet Multiple Products Path Traversal Exploited

  CVE-2025-61624Apr 14, 2026FortinetEPSS 1.4%

  An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPA

• 9.8 Critical severity

  Fortinet Multiple Products Heap-based Buffer Overflow Exploited

  CVE-2025-25249Jan 13, 2026FortinetEPSS 3.74%

  A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.

• 9.8 Critical severity

  Fortinet Multiple Products Improper Verification of Cryptographic Signature Exploited

  CVE-2025-59718Dec 9, 2025FortinetEPSS 68.1%

  A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10,

• 9.8 Critical severity

  FortiPAM: Weak Authentication

  CVE-2025-49201Oct 14, 2025Fortinet

  A weak authentication vulnerability in Fortinet FortiPAM 1.5.0, FortiPAM 1.4.0 through 1.4.2, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiSwitchManager 7.2.0 through 7.2.4 allows attacker to

• 7.2 High severity

  FortiPAM: Heap-based Buffer Overflow

  CVE-2025-22258Oct 14, 2025Fortinet

  A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through

• 8.1 High severity

  FortiProxy: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-26009Aug 12, 2025Fortinet

  An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, Fo

• 7.2 High severity

  FortiProxy: Missing Authentication for Critical Functionality

  CVE-2025-22252May 28, 2025Fortinet

  A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and version 7.6.0 may allow an attacker with knowledge of an existing admin account t

• 9.8 Critical severity

  FortiSwitchManager: Buffer Underwrite

  CVE-2023-25610Mar 24, 2025FortinetEPSS 18.3%

  A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2

• 9.8 Critical severity

  FortiManager: Missing Authentication for Critical Functionality

  CVE-2024-26011Nov 12, 2024Fortinet

  A missing authentication for critical function vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.4, FortiManager 7.0.0 through 7.0.11, FortiManager 6.4.0 through 6.4.14, FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 throug

• 8.8 High severity

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and…

  CVE-2022-45862Aug 13, 2024Fortinet

  An insufficient session expiration vulnerability [CWE-613] vulnerability in FortiOS 7.2.5 and below, 7.0 all versions, 6.4 all versions; FortiProxy 7.2 all versions, 7.0 all versions; FortiPAM 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versi

• 7.5 High severity

  FortiOS: Out-of-bounds Write

  CVE-2024-26010Jun 11, 2024Fortinet

  A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.14, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiPAM 1.2 all versions, FortiPAM 1.

• 7.2 High severity

  FortiOS: Use of Externally-Controlled Format String

  CVE-2023-45583May 14, 2024Fortinet

  A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiPAM 1.1.0, FortiPAM 1.0 all versions, FortiProxy 7.2.0 through

• 9.8 Critical severity

  Fortinet Multiple Products Format String Exploited

  CVE-2024-23113Feb 15, 2024FortinetEPSS 61.7%

  A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through

• 8.1 High severity

  FortiSwitchManager: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-41335Feb 16, 2023Fortinet

  A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.10, FortiProxy version 7.2.0 through 7.2.1, 7.0.0 through 7.0.7 and before 2.0.10, FortiSwitchManager 7.2.0 and before 7.0.0 al

• 9.8 Critical severity

  Fortinet Multiple Products Authentication Bypass Exploited

  CVE-2022-40684Oct 18, 2022FortinetEPSS 100%

  An authentication bypass using an alternate path or channel [CWE-288] in Fortinet FortiOS version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.6, FortiProxy version 7.2.0 and version 7.0.0 through 7.0.6 and FortiSwitchManager version 7.2.0 and 7.0.0 allows an una