Fortinet: 악용된 취약점
- 32악용된 취약점
- 14랜섬웨어에 사용됨
- 2026. 10. 16.가장 최근 추가
- FortiOS 9
- Multiple Products 7
- FortiOS and FortiProxy 4
- FortiClient EMS 3
- FortiWeb 3
- FortiSandbox 2
- FortiMail 1
- FortiManager 1
- FortiOS and FortiProxy SSL-VPN 1
- FortiOS and FortiADC 1
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2026. 10. 16. | Path Traversal | Multiple Products | 보통 5.4 | 1.3% |
| 2026. 10. 1. | Path Traversal | FortiMail | 치명적 9.8 | 4.6% |
| 2026. 9. 9. | Heap-based Buffer Overflow | Multiple Products | 높음 7.4 | 3.7% |
| 2026. 7. 27. | Exposure of Sensitive Information to an Unauthorized Actor | FortiOS | 보통 5.3 | 29% |
| 2026. 7. 16. | OS Command Injection | FortiSandbox | 치명적 9.1 | 93% |
| 2026. 7. 16. | OS Command Injection | FortiSandbox | 치명적 9.1 | 76% |
| 2026. 4. 13. | SQL Injection | FortiClient EMS | 치명적 9.1 | 98% |
| 2026. 4. 6. | Improper Access Control | FortiClient EMS | 치명적 9.1 | 94% |
| 2026. 1. 27. | Authentication Bypass Using an Alternate Path or Channel | Multiple Products | 치명적 9.4 | 87% |
| 2025. 12. 16. | Improper Verification of Cryptographic Signature | Multiple Products | 치명적 9.1 | 68% |
| 2025. 11. 18. | OS Command Injection | FortiWeb | 보통 6.7 | 55% |
| 2025. 11. 14. | Path Traversal | FortiWeb | 치명적 9.4 | 91% |
| 2025. 7. 18. | SQL Injection | FortiWeb | 치명적 9.6 | 99.9% |
| 2025. 6. 25. | Use of Hard-Coded Credentials | FortiOS | 보통 6.5 | 6.6% |
| 2025. 5. 14. | Stack-Based Buffer Overflow | Multiple Products | 치명적 9.6 | 31% |
| 2025. 3. 18. | Authentication Bypass | FortiOS and FortiProxy | 높음 8.1 | 7.2% |
| 2025. 1. 14. | Authentication Bypass | FortiOS and FortiProxy | 치명적 9.6 | 94% |
| 2024. 10. 23. | Missing Authentication | FortiManager | 치명적 9.8 | 95% |
| 2024. 10. 9. | Format String | Multiple Products | 치명적 9.8 | 62% |
| 2024. 3. 25. | SQL Injection | FortiClient EMS | 치명적 9.3 | 98% |
| 2024. 2. 9. | Out-of-Bound Write | FortiOS | 치명적 9.6 | 85% |
| 2023. 6. 13. | Heap-Based Buffer Overflow | FortiOS and FortiProxy SSL-VPN | 치명적 9.2 | 86% |
| 2023. 3. 14. | Path Traversal | FortiOS | 보통 6.5 | 11% |
| 2022. 12. 13. | Heap-Based Buffer Overflow | FortiOS | 치명적 9.3 | 99.5% |
| 2022. 10. 11. | Authentication Bypass | Multiple Products | 치명적 9.8 | >99.9% |
| 2022. 9. 8. | Improper Access Control | FortiOS and FortiADC | 보통 4.3 | 38% |
| 2022. 1. 10. | Out-of-bounds Write | FortiOS and FortiProxy | 보통 4.3 | 34% |
| 2022. 1. 10. | Improper Authorization | FortiOS and FortiProxy | 치명적 9.1 | 82% |
| 2021. 12. 10. | Arbitrary File Download | FortiOS | 낮음 3.3 | 0.9% |
| 2021. 11. 3. | SSL VPN Improper Authentication | FortiOS | 높음 7.5 | 45% |
| 2021. 11. 3. | Default Configuration | FortiOS | 보통 6.5 | 19% |
| 2021. 11. 3. | SSL VPN Path Traversal | FortiOS | 치명적 9.1 | >99.9% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.