Advisories · Technology

Fortinet FortiAuthenticator.

Every CVE that names Fortinet FortiAuthenticator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-53379 CVE record

CVSS 7.0 High

Out-of-bounds read in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Memory corruption
Not analysed yet 14 Jul 2026
CVE-2026-44277 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Improper access control in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Broken access control
Not analysed yet 12 May 2026
CVE-2026-21743 CVE record

CVSS 6.8 Medium

Missing authorization in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Broken access control
Not analysed yet 10 Feb 2026
CVE-2025-57823 CVE record

CVSS 2.6 Low

Forced browsing in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2025-59923 CVE record

CVSS 2.6 Low

Improper access control in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Broken access control
Not analysed yet 9 Dec 2025
CVE-2022-23439 CVE record

CVSS 4.1 Medium

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
Not analysed yet 22 Jan 2025
CVE-2024-23664 CVE record

CVSS 5.8 Medium

Open redirect in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Open redirect
Not analysed yet 3 Jun 2024
CVE-2022-22302 CVE record

CVSS 5.3 Medium

Cleartext storage of sensitive information in Fortinet FortiAuthenticator and others
- Fortinet FortiAuthenticator
- Fortinet FortiOS
- Information disclosure
Not analysed yet 11 Jul 2023
CVE-2022-35850 CVE record

CVSS 4.2 Medium

Cross-site scripting in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Cross-site scripting (XSS)
Not analysed yet 11 Apr 2023
CVE-2023-26208 CVE record

CVSS 3.5 Low

Unlimited authentication attempts in Fortinet FortiAuthenticator
- Fortinet FortiAuthenticator
- Authentication bypass
Not analysed yet 9 Mar 2023
CVE-2021-26116 CVE record

CVSS 6.7 Medium

An improper neutralization of special elements used in an OS command vulnerability in the command line interpreter of FortiAuthenticator before 6.3.1 may allow an authenticated attacker to execute un…
- Fortinet FortiAuthenticator
Not analysed yet 6 Apr 2022
CVE-2021-43068 CVE record

CVSS 5.4 Medium

Fortinet FortiAuthenticator: A improper authentication in Fortinet FortiAuthenticator version 6.4.0 allows user to…
- Fortinet FortiAuthenticator
Not analysed yet 9 Dec 2021
CVE-2021-43067 CVE record

CVSS 8.3 High

Fortinet FortiAuthenticator: A exposure of sensitive information to an unauthorized actor in Fortinet…
- Fortinet FortiAuthenticator
Not analysed yet 8 Dec 2021
CVE-2021-24005 CVE record

CVSS 4.0 Medium

Fortinet FortiAuthenticator: Usage of hard-coded cryptographic keys to encrypt configuration files and debug logs in…
- Fortinet FortiAuthenticator
Not analysed yet 6 Jul 2021