Fortinet Fortipam vulnerabilities

30 CVEs affecting Fortinet Fortipam, 2 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-106175, published 2026-10-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-23113: Fortinet Multiple Products Format String Vulnerability, published 2024-02-15. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2024-10-09. EPSS: 61.7% chance of exploitation in the next 30 days. A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8,…
CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability, published 2026-04-14. Medium severity, CVSS 6.5. Actively exploited: in CISA KEV since 2026-10-16. EPSS: 1.1% chance of exploitation in the next 30 days. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all…
CVE-2026-84392, published 2026-09-08. Low severity, CVSS 2.7. EPSS: 1.1% chance of exploitation in the next 30 days. A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions,…
CVE-2023-41678, published 2023-12-13. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A double free in Fortinet FortiOS versions 7.0.0 through 7.0.5, FortiPAM version 1.0.0 through 1.0.3, 1.1.0 through 1.1.1 allows attacker to execute unauthorized code or commands via specifically…
CVE-2023-36639, published 2023-12-13. High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days. A use of externally-controlled format string in Fortinet FortiProxy versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, FortiOS versions 7.4.0, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0…
CVE-2024-26010, published 2024-06-11. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A stack-based buffer overflow in Fortinet FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiWeb, FortiAuthenticator, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.1 through…
CVE-2024-45324, published 2025-03-11. High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days. A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.4.15, FortiProxy…
CVE-2023-29181, published 2024-02-22. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through…
CVE-2025-57740, published 2025-10-14. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version…
CVE-2026-59837, published 2026-07-14. Medium severity, CVSS 6.6. EPSS: 0.7% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions,…

Latest

CVE-2026-106175, published 2026-10-13. Low severity, CVSS 2.3. EPSS: 0.1% chance of exploitation in the next 30 days. A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.7, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all…
CVE-2026-59839, published 2026-07-14. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS…
CVE-2026-23573, published 2026-07-14. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS…
CVE-2024-47570, published 2025-12-09. Medium severity, CVSS 6.6. EPSS: 0.4% chance of exploitation in the next 30 days. An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0 all versions; FortiProxy 7.4.0 through 7.4.3, 7.2.0 through…
CVE-2025-61713, published 2025-11-18. Medium severity, CVSS 4.4. EPSS: 0.1% chance of exploitation in the next 30 days. A Cleartext Storage of Sensitive Information in Memory vulnerability [CWE-316] in Fortinet FortiPAM 1.6.0, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM…
CVE-2025-54821, published 2025-11-18. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. An Improper Privilege Management vulnerability [CWE-269] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.11, FortiOS 7.2 all versions, FortiOS 7.0 all versions,…