Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortios:7.4.8:*:*:*:*:*:*:*

part: o version: 7.4.8 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortios (61cd023c-b8ba-5b41-89bb-a7c3ba2858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-84392 vulnerable 2026-09-16 04:33:10.461895 Details available
LOW (2.5)
A NULL Pointer Dereference vulnerability [CWE-476] vulnerability in Fortinet FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.9.0, FortiPAM 1.8 all versions, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions may allow an authenticated attacker to crash the httpsd daemon via crafted HTTP requests.
Published: 2026-09-08T16:42:06.190Z
Updated: 2026-09-08T17:28:27.907Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-70466 vulnerable 2026-09-16 04:33:00.148143 Details available
MEDIUM (4.8)
A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper access control via <insert attack vector here>
Published: 2026-08-12T12:19:02.791Z
Updated: 2026-09-15T15:18:13.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-71408 vulnerable 2026-09-16 04:32:59.624283 Details available
MEDIUM (5)
A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>
Published: 2026-08-12T12:19:00.441Z
Updated: 2026-08-12T13:43:25.034Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59840 vulnerable 2026-07-29 01:03:17.934764 Details available
MEDIUM (4.1)
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to information disclosure via <insert attack vector here>
Published: 2026-07-14T15:19:51.309Z
Updated: 2026-08-11T12:23:48.662Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-59839 vulnerable 2026-07-29 01:03:17.918663 Details available
MEDIUM (5)
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.8.0, FortiPAM 1.7.0 through 1.7.2, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4 through 7.4.13, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions may allow attacker to execute unauthorized code or commands via <insert attack vector here>
Published: 2026-07-14T15:19:46.961Z
Updated: 2026-08-11T12:23:47.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-23573 vulnerable 2026-07-29 00:31:59.296844 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62826 vulnerable 2026-07-29 00:09:53.541497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62675 vulnerable 2026-07-29 00:09:53.226903 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-24858 vulnerable 2026-06-08 07:53:18.378443 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-64157 vulnerable 2026-06-08 07:39:18.137856 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62439 vulnerable 2026-06-08 07:37:29.657642 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-61624 vulnerable 2026-06-08 07:37:27.698750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59718 vulnerable 2026-06-08 07:35:22.945610 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58903 vulnerable 2026-06-08 07:35:19.715761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58413 vulnerable 2026-06-08 07:35:18.157052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-55018 vulnerable 2026-06-08 07:33:13.972189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54821 vulnerable 2026-06-08 07:33:13.379307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53847 vulnerable 2026-06-08 07:31:15.821028 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53844 vulnerable 2026-06-08 07:31:15.702072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53843 vulnerable 2026-06-08 07:31:15.691510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47890 vulnerable 2026-06-08 07:27:15.029791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31514 vulnerable 2026-06-08 07:18:58.040410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25253 vulnerable 2026-06-08 07:12:51.000040 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32122 vulnerable 2026-06-08 06:35:32.810829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.