FortiNet – Page 2 – TheCyberThrone

Critical SQL Injection in FortiClientEMS: CVE-2026-21643

CVE-2026-21643 is a critical SQL injection vulnerability affecting Fortinet FortiClientEMS version 7.4.4, enabling unauthenticated attackers to execute arbitrary code via crafted HTTP requests to the administrative interface. Vulnerability Overview This…

PravinKarthik February 12, 2026

CVE-2026-24858: Fortinet FortiCloud SSO Zero-Day Under Active Exploitation

A critical authentication bypass vulnerability, CVE-2026-24858, impacts multiple Fortinet products via flawed FortiCloud SSO controls. Fortinet confirmed active exploitation by malicious accounts before patches rolled out this week. Vulnerability Overview…

PravinKarthik January 28, 2026

CVE-2025-64155 – Critical RCE in Fortinet FortiSIEM

Fortinet patched a severe unauthenticated remote command injection flaw in FortiSIEM on January 13, 2026, tracked as CVE-2025-64155 with CVSS 9.4.Discovered by Horizon3.ai in August 2025, it chains argument injection…

PravinKarthik January 14, 2026

Fortinet Critical Bugs CVE-2025-59718 and CVE-2025-59719

Fortinet recently disclosed two critical authentication bypass vulnerabilities in its FortiCloud SSO login feature, tracked as CVE-2025-59718 and CVE-2025-59719. These flaws allow unauthenticated attackers to gain full administrative access via…

PravinKarthik December 11, 2025

Critical Fortinet FortiWeb Vulnerability CVE-2025-64446

On November 14, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) officially added CVE-2025-64446 to its Known Exploited Vulnerabilities (KEV) catalog. This critical vulnerability affects Fortinet FortiWeb web application firewall…

PravinKarthik November 15, 2025

CVE-2025-25257 Critical FortiWeb SQL Injection Leading to RCE

🔐 Vulnerability Summary CVE ID: CVE-2025-25257 Product Affected: Fortinet FortiWeb – A Web Application Firewall (WAF) Vulnerability Type: Unauthenticated SQL Injection (CWE-89) Impact: Full system compromise via Remote Code Execution…

PravinKarthik July 14, 2025

CISA Catalog Update-June 25, 2025

🔍 Executive Summary The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent update to its Known Exploited Vulnerabilities (KEV) Catalog, highlighting three newly confirmed exploited security flaws…

PravinKarthik June 26, 2025

CVE-2025-32756 Critical RCE in Fortinet Products

CVE-2025-32756 is a critical stack-based buffer overflow vulnerability affecting multiple Fortinet products, including FortiVoice, FortiMail, FortiNDR, FortiRecorder, and FortiCamera. This flaw allows unauthenticated remote attackers to execute arbitrary code or…

PravinKarthik May 15, 2025