Fortinet: ثغرات مُستغلّة
- 32ثغرة مُستغلّة
- 14تستخدمها برامج الفدية
- 16/10/2026آخر ما أُضيف
- FortiOS 9
- Multiple Products 7
- FortiOS and FortiProxy 4
- FortiClient EMS 3
- FortiWeb 3
- FortiSandbox 2
- FortiMail 1
- FortiManager 1
- FortiOS and FortiProxy SSL-VPN 1
- FortiOS and FortiADC 1
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 16/10/2026 | Path Traversal | Multiple Products | متوسطة 5.4 | 1.3% |
| 01/10/2026 | Path Traversal | FortiMail | حرجة 9.8 | 4.6% |
| 09/09/2026 | Heap-based Buffer Overflow | Multiple Products | مرتفع 7.4 | 3.7% |
| 27/07/2026 | Exposure of Sensitive Information to an Unauthorized Actor | FortiOS | متوسطة 5.3 | 29% |
| 16/07/2026 | OS Command Injection | FortiSandbox | حرجة 9.1 | 93% |
| 16/07/2026 | OS Command Injection | FortiSandbox | حرجة 9.1 | 76% |
| 13/04/2026 | SQL Injection | FortiClient EMS | حرجة 9.1 | 98% |
| 06/04/2026 | Improper Access Control | FortiClient EMS | حرجة 9.1 | 94% |
| 27/01/2026 | Authentication Bypass Using an Alternate Path or Channel | Multiple Products | حرجة 9.4 | 87% |
| 16/12/2025 | Improper Verification of Cryptographic Signature | Multiple Products | حرجة 9.1 | 68% |
| 18/11/2025 | OS Command Injection | FortiWeb | متوسطة 6.7 | 55% |
| 14/11/2025 | Path Traversal | FortiWeb | حرجة 9.4 | 91% |
| 18/07/2025 | SQL Injection | FortiWeb | حرجة 9.6 | 99.9% |
| 25/06/2025 | Use of Hard-Coded Credentials | FortiOS | متوسطة 6.5 | 6.6% |
| 14/05/2025 | Stack-Based Buffer Overflow | Multiple Products | حرجة 9.6 | 31% |
| 18/03/2025 | Authentication Bypass | FortiOS and FortiProxy | مرتفع 8.1 | 7.2% |
| 14/01/2025 | Authentication Bypass | FortiOS and FortiProxy | حرجة 9.6 | 94% |
| 23/10/2024 | Missing Authentication | FortiManager | حرجة 9.8 | 95% |
| 09/10/2024 | Format String | Multiple Products | حرجة 9.8 | 62% |
| 25/03/2024 | SQL Injection | FortiClient EMS | حرجة 9.3 | 98% |
| 09/02/2024 | Out-of-Bound Write | FortiOS | حرجة 9.6 | 85% |
| 13/06/2023 | Heap-Based Buffer Overflow | FortiOS and FortiProxy SSL-VPN | حرجة 9.2 | 86% |
| 14/03/2023 | Path Traversal | FortiOS | متوسطة 6.5 | 11% |
| 13/12/2022 | Heap-Based Buffer Overflow | FortiOS | حرجة 9.3 | 99.5% |
| 11/10/2022 | Authentication Bypass | Multiple Products | حرجة 9.8 | >99.9% |
| 08/09/2022 | Improper Access Control | FortiOS and FortiADC | متوسطة 4.3 | 38% |
| 10/01/2022 | Out-of-bounds Write | FortiOS and FortiProxy | متوسطة 4.3 | 34% |
| 10/01/2022 | Improper Authorization | FortiOS and FortiProxy | حرجة 9.1 | 82% |
| 10/12/2021 | Arbitrary File Download | FortiOS | منخفضة 3.3 | 0.9% |
| 03/11/2021 | SSL VPN Improper Authentication | FortiOS | مرتفع 7.5 | 45% |
| 03/11/2021 | Default Configuration | FortiOS | متوسطة 6.5 | 19% |
| 03/11/2021 | SSL VPN Path Traversal | FortiOS | حرجة 9.1 | >99.9% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.