Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*

part: o version: 6.0.11 update: *

VendorFortinet (2b06c5e0-0a17-54f4-810a-5ef236d51947)
ProductFortios (61cd023c-b8ba-5b41-89bb-a7c3ba2858f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58413 vulnerable 2026-06-08 07:35:18.223605 Details available
MEDIUM (6.9)
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiOS 6.2 all versions, FortiOS 6.0 all versions, FortiSASE 25.3.b allows attacker to execute unauthorized code or commands via specially crafted packets
Published: 2025-11-18T17:01:22.032Z
Updated: 2026-07-14T12:43:37.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53844 vulnerable 2026-06-08 07:31:15.749025 Details available
HIGH (8.3)
A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2026-05-12T16:54:10.126Z
Updated: 2026-07-14T12:43:34.237Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26011 vulnerable 2026-06-08 06:31:24.548369 Details available
MEDIUM (5.2)
A missing authentication for critical function in Fortinet FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.14, FortiPAM version 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy version 7.4.0 through 7.4.2, 7.2.0 through 7.2.9, 7.0.0 through 7.0.17, 2.0.0 through 2.0.14, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7, FortiSwitchManager version 7.2.0 through 7.2.3, 7.0.0 through 7.0.3, FortiPortal version 6.0.0 through 6.0.14, FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7, 7.0.0 through 7.0.14, 6.4.0 through 6.4.15, 6.2.0 through 6.2.16, 6.0.0 through 6.0.18 allows attacker to execute unauthorized code or commands via specially crafted packets.
Published: 2024-11-12T18:53:56.665Z
Updated: 2024-11-13T18:44:42.785Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-26009 vulnerable 2026-06-08 06:31:24.481277 Details available
HIGH (7.9)
An authentication bypass using an alternate path or channel [CWE-288] vulnerability in Fortinet FortiOS 6.4.0 through 6.4.15, FortiOS 6.2.0 through 6.2.16, FortiOS 6.0 all versions, FortiPAM 1.2.0, FortiPAM 1.1.0 through 1.1.2, FortiPAM 1.0.0 through 1.0.3, FortiProxy 7.4.0 through 7.4.2, FortiProxy 7.2.0 through 7.2.8, FortiProxy 7.0.0 through 7.0.15, FortiSwitchManager 7.2.0 through 7.2.3, FortiSwitchManager 7.0.0 through 7.0.3 allows an unauthenticated attacker to seize control of a managed device via crafted FGFM requests, if the device is managed by a FortiManager, and if the attacker knows that FortiManager's serial number.
Published: 2025-08-12T18:59:47.462Z
Updated: 2026-04-20T07:54:41.800Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42786 vulnerable 2026-06-08 06:11:09.393118 Details available
MEDIUM (6.4)
A null pointer dereference in FortiOS versions 7.4.0 through 7.4.1, 7.2.0 through 7.2.5, 7.0 all versions, 6.4 all versions , 6.2 all versions and 6.0 all versions allows attacker to trigger a denial of service via a crafted http request.
Published: 2025-01-14T14:08:51.276Z
Updated: 2025-01-14T20:56:06.441Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42785 vulnerable 2026-06-08 06:11:09.375080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-29175 vulnerable 2026-06-08 06:02:38.953158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-28002 vulnerable 2026-06-08 05:57:42.797732 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-25610 vulnerable 2026-06-08 05:56:09.429259 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-23439 vulnerable 2026-06-08 05:40:57.163843 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42757 vulnerable 2026-06-08 05:35:22.616277 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42755 vulnerable 2026-06-08 05:35:22.586891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.