Fortinet Fortirecorder vulnerabilities

12 CVEs affecting Fortinet Fortirecorder, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-55717, published 2026-03-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-32756: Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability, published 2025-05-13. Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2025-05-14. EPSS: 30.7% chance of exploitation in the next 30 days. A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through…
CVE-2024-48884, published 2025-01-14. Critical severity, CVSS 9.1. EPSS: 15.3% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.1 through 7.4.3, FortiManager Cloud 7.4.1…
CVE-2024-48885, published 2025-01-16. Critical severity, CVSS 9.1. EPSS: 0.8% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0…
CVE-2024-56497, published 2025-01-14. Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days. An improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiMail versions 7.2.0 through 7.2.4 and 7.0.0 through 7.0.6 and 6.4.0 through 6.4.7,…
CVE-2024-46664, published 2025-01-14. Medium severity, CVSS 4.9. EPSS: 0.5% chance of exploitation in the next 30 days. A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to read files from the underlying filesystem via crafted HTTP or…
CVE-2021-24008, published 2025-03-28. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version 5.1.0, version 5.0.0,…
CVE-2022-27488, published 2023-12-13. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) in Fortinet FortiVoiceEnterprise version 6.4.x, 6.0.x, FortiSwitch version 7.0.0 through 7.0.4, 6.4.0 through 6.4.10, 6.2.0 through 6.2.7, 6.0.x, FortiMail version…
CVE-2024-47569, published 2025-10-14. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A insertion of sensitive information into sent data vulnerability in Fortinet FortiMail 7.4.0 through 7.4.2, FortiMail 7.2.0 through 7.2.6, FortiMail 7.0 all versions, FortiManager 7.6.0 through…
CVE-2022-23439, published 2025-01-22. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an…
CVE-2024-47566, published 2025-01-14. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. A improper limitation of a pathname to a restricted directory ('path traversal') [CWE-23] in Fortinet FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4 allows a privileged attacker to delete…

Latest

CVE-2025-55717, published 2026-03-10. Medium severity, CVSS 4.0. EPSS: 0.1% chance of exploitation in the next 30 days. A cleartext storage of sensitive information vulnerability [CWE-312] vulnerability in Fortinet FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail…
CVE-2024-40588, published 2025-08-12. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiCamera 2.0.0, FortiCamera 1.1 all versions, FortiCamera 1.0 all versions,…