Fortinet Antivirus Engine vulnerabilities

2 CVEs affecting Fortinet Antivirus Engine, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9295, published 2025-03-17.

More from Fortinet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-26122, published 2022-11-02. High severity, CVSS 8.6. EPSS: 0.5% chance of exploitation in the next 30 days. An insufficient verification of data authenticity vulnerability [CWE-345] in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an…
• CVE-2020-9295, published 2025-03-17. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. FortiOS 6.2 running AV engine version 6.00142 and below, FortiOS 6.4 running AV engine version 6.00144 and below and FortiClient 6.2 running AV engine version 6.00137 and below may not immediately…