Fortinet：悪用された脆弱性
- 32件の悪用された脆弱性
- 14ランサムウェアで使用
- 2026/10/16最新の追加
- FortiOS 9
- Multiple Products 7
- FortiOS and FortiProxy 4
- FortiClient EMS 3
- FortiWeb 3
- FortiSandbox 2
- FortiMail 1
- FortiManager 1
- FortiOS and FortiProxy SSL-VPN 1
- FortiOS and FortiADC 1
| 追加日 | 脆弱性 | 製品 | 深刻度 | 攻撃の可能性 |
|---|---|---|---|---|
| 2026/10/16 | Path Traversal | Multiple Products | 中 5.4 | 1.4% |
| 2026/10/01 | Path Traversal | FortiMail | 緊急 9.8 | 4.6% |
| 2026/09/09 | Heap-based Buffer Overflow | Multiple Products | 高 7.4 | 3.7% |
| 2026/07/27 | Exposure of Sensitive Information to an Unauthorized Actor | FortiOS | 中 5.3 | 29% |
| 2026/07/16 | OS Command Injection | FortiSandbox | 緊急 9.1 | 93% |
| 2026/07/16 | OS Command Injection | FortiSandbox | 緊急 9.1 | 76% |
| 2026/04/13 | SQL Injection | FortiClient EMS | 緊急 9.1 | 98% |
| 2026/04/06 | Improper Access Control | FortiClient EMS | 緊急 9.1 | 94% |
| 2026/01/27 | Authentication Bypass Using an Alternate Path or Channel | Multiple Products | 緊急 9.4 | 87% |
| 2025/12/16 | Improper Verification of Cryptographic Signature | Multiple Products | 緊急 9.1 | 68% |
| 2025/11/18 | OS Command Injection | FortiWeb | 中 6.7 | 55% |
| 2025/11/14 | Path Traversal | FortiWeb | 緊急 9.4 | 91% |
| 2025/07/18 | SQL Injection | FortiWeb | 緊急 9.6 | 99.9% |
| 2025/06/25 | Use of Hard-Coded Credentials | FortiOS | 中 6.5 | 6.6% |
| 2025/05/14 | Stack-Based Buffer Overflow | Multiple Products | 緊急 9.6 | 31% |
| 2025/03/18 | Authentication Bypass | FortiOS and FortiProxy | 高 8.1 | 7.2% |
| 2025/01/14 | Authentication Bypass | FortiOS and FortiProxy | 緊急 9.6 | 94% |
| 2024/10/23 | Missing Authentication | FortiManager | 緊急 9.8 | 95% |
| 2024/10/09 | Format String | Multiple Products | 緊急 9.8 | 62% |
| 2024/03/25 | SQL Injection | FortiClient EMS | 緊急 9.3 | 98% |
| 2024/02/09 | Out-of-Bound Write | FortiOS | 緊急 9.6 | 85% |
| 2023/06/13 | Heap-Based Buffer Overflow | FortiOS and FortiProxy SSL-VPN | 緊急 9.2 | 87% |
| 2023/03/14 | Path Traversal | FortiOS | 中 6.5 | 11% |
| 2022/12/13 | Heap-Based Buffer Overflow | FortiOS | 緊急 9.3 | 99.5% |
| 2022/10/11 | Authentication Bypass | Multiple Products | 緊急 9.8 | >99.9% |
| 2022/09/08 | Improper Access Control | FortiOS and FortiADC | 中 4.3 | 38% |
| 2022/01/10 | Out-of-bounds Write | FortiOS and FortiProxy | 中 4.3 | 31% |
| 2022/01/10 | Improper Authorization | FortiOS and FortiProxy | 緊急 9.1 | 82% |
| 2021/12/10 | Arbitrary File Download | FortiOS | 低 3.3 | 0.9% |
| 2021/11/03 | SSL VPN Improper Authentication | FortiOS | 高 7.5 | 45% |
| 2021/11/03 | Default Configuration | FortiOS | 中 6.5 | 19% |
| 2021/11/03 | SSL VPN Path Traversal | FortiOS | 緊急 9.1 | >99.9% |
出典：Known Exploited Vulnerabilities（CISA、パブリックドメイン）、CVE records（cve.org）、EPSS（FIRST）。攻撃の可能性は、今後30日以内に誰かがその脆弱性の悪用を試みるというEPSSの推定値です。