Sysprobs Sysprobs

CISA KEV by vendor

Fortinet vulnerabilities in the CISA KEV catalogue

32 Fortinet entries in CISA's Known Exploited Vulnerabilities catalogue, 14 of them (44 percent) known to have been used in ransomware campaigns. First added 3 November 2021, latest 16 October 2026.

Last updated MethodologyDownload all entries (CSV)

By . Published by Sysprobs.

Dinesh has worked in IT for about 20 years across virtualisation, networking and Microsoft platforms. He runs Sysprobs.

Data status: a source is stale

Last synced CISA catalogue version 2026.11.04 (released 4 November 2026) 1,768 entries Updated manually

32entries, 1.8% of the catalogue
14known ransomware use
0added in the last 7 days
0federal due dates in the next 14 days

Products

Fortinet products in the catalogue, by number of entries
Product, as CISA names itEntries
FortiOS9
Multiple Products7
FortiOS and FortiProxy4
FortiClient EMS3
FortiWeb3
FortiSandbox2
FortiMail1
FortiManager1
FortiOS and FortiProxy SSL-VPN1
FortiOS and FortiADC1

Latest additions

The 10 most recent Fortinet entries
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2025-61624Multiple Products2026-10-162026-10-19 passedUnknown6.5 Medium1.3%Not auto, total3 days + triage
CVE-2026-104286FortiMail2026-10-012026-10-04Unknown9.8 Critical4.5%Auto, total3 days + triage
CVE-2025-25249Multiple Products2026-09-092026-09-12Unknown9.8 Critical3.7%Not auto, total3 days + triage
CVE-2025-68686FortiOS2026-07-272026-08-10Unknown5.9 Medium29.4%Not auto, partial14 days
CVE-2026-39808FortiSandbox2026-07-162026-07-19Unknown9.8 Critical93.1%Auto, total3 days + triage
CVE-2026-25089FortiSandbox2026-07-162026-07-19Unknown9.8 Critical76.1%Auto, total3 days + triage
CVE-2026-21643FortiClient EMS2026-04-132026-04-16Unknown9.8 Critical97.7%Auto, total3 days + triage
CVE-2026-35616FortiClient EMS2026-04-062026-04-09Unknown9.8 Critical93.9%Auto, total3 days + triage
CVE-2026-24858Multiple Products2026-01-272026-01-30Unknown9.8 Critical86.5%Auto, total3 days + triage
CVE-2025-59718Multiple Products2025-12-162025-12-23Unknown9.8 Critical68.2%Auto, total3 days + triage

All 32 entries

Every Fortinet entry, newest first
CVEProductAddedDueRansomwareCVSSEPSSSSVCExposed asset window
CVE-2025-61624Multiple Products2026-10-162026-10-19 passedUnknown6.5 Medium1.3%Not auto, total3 days + triage
CVE-2026-104286FortiMail2026-10-012026-10-04Unknown9.8 Critical4.5%Auto, total3 days + triage
CVE-2025-25249Multiple Products2026-09-092026-09-12Unknown9.8 Critical3.7%Not auto, total3 days + triage
CVE-2025-68686FortiOS2026-07-272026-08-10Unknown5.9 Medium29.4%Not auto, partial14 days
CVE-2026-39808FortiSandbox2026-07-162026-07-19Unknown9.8 Critical93.1%Auto, total3 days + triage
CVE-2026-25089FortiSandbox2026-07-162026-07-19Unknown9.8 Critical76.1%Auto, total3 days + triage
CVE-2026-21643FortiClient EMS2026-04-132026-04-16Unknown9.8 Critical97.7%Auto, total3 days + triage
CVE-2026-35616FortiClient EMS2026-04-062026-04-09Unknown9.8 Critical93.9%Auto, total3 days + triage
CVE-2026-24858Multiple Products2026-01-272026-01-30Unknown9.8 Critical86.5%Auto, total3 days + triage
CVE-2025-59718Multiple Products2025-12-162025-12-23Unknown9.8 Critical68.2%Auto, total3 days + triage
CVE-2025-58034FortiWeb2025-11-182025-11-25Unknown7.2 High54.7%Not auto, total3 days + triage
CVE-2025-64446FortiWeb2025-11-142025-11-21Unknown9.8 Critical91.0%Auto, total3 days + triage
CVE-2025-25257FortiWeb2025-07-182025-08-08Unknown9.8 Critical99.9%Auto, total3 days + triage
CVE-2019-6693FortiOS2025-06-252025-07-16Known6.5 Medium6.6%Not auto, partial14 days
CVE-2025-32756Multiple Products2025-05-142025-06-04Unknown9.8 Critical30.9%Auto, total3 days + triage
CVE-2025-24472FortiOS and FortiProxy2025-03-182025-04-08Known8.1 High7.2%Not auto, total3 days + triage
CVE-2024-55591FortiOS and FortiProxy2025-01-142025-01-21Known9.8 Critical94.3%Auto, total3 days + triage
CVE-2024-47575FortiManager2024-10-232024-11-13Unknown9.8 Critical94.7%Not auto, total3 days + triage
CVE-2024-23113Multiple Products2024-10-092024-10-30Unknown9.8 Critical61.7%Auto, total3 days + triage
CVE-2023-48788FortiClient EMS2024-03-252024-04-15Known9.8 Critical98.4%Auto, total3 days + triage
CVE-2024-21762FortiOS2024-02-092024-02-16Known9.8 Critical84.5%Auto, total3 days + triage
CVE-2023-27997FortiOS and FortiProxy SSL-VPN2023-06-132023-07-04Known9.8 Critical85.6%Auto, total3 days + triage
CVE-2022-41328FortiOS2023-03-142023-04-04Unknown7.1 High10.6%Not auto, total3 days + triage
CVE-2022-42475FortiOS2022-12-132023-01-03Known9.8 Critical99.4%Auto, total3 days + triage
CVE-2022-40684Multiple Products2022-10-112022-11-01Known9.8 Critical99.9%Auto, total3 days + triage
CVE-2018-13374FortiOS and FortiADC2022-09-082022-09-29Known4.3 Medium38.0%Not auto, total3 days + triage
CVE-2018-13383FortiOS and FortiProxy2022-01-102022-07-10Known6.5 Medium32.4%Not auto, partial14 days
CVE-2018-13382FortiOS and FortiProxy2022-01-102022-07-10Known7.5 High81.6%Auto, total3 days + triage
CVE-2021-44168FortiOS2021-12-102021-12-24Unknown7.8 High0.9%Not auto, partial14 days
CVE-2020-12812FortiOS2021-11-032022-05-03Known9.8 Critical45.3%Auto, partial3 days
CVE-2019-5591FortiOS2021-11-032022-05-03Known6.5 Medium18.5%Not auto, partial14 days
CVE-2018-13379FortiOS2021-11-032022-05-03Known9.8 Critical99.9%Auto, partial3 days

Due dates bind US federal civilian executive branch agencies only (BOD 26-04). Filter Fortinet in the tracker by date, score or status.

Source: CISA Known Exploited Vulnerabilities Catalog; NVD, FIRST EPSS and CISA SSVC for the scores. This product uses data from the NVD API but is not endorsed or certified by the NVD. CISA does not endorse Sysprobs.