# Fortinet FortiSwitch.

Every CVE that names Fortinet FortiSwitch among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Double free in Fortinet FortiOS and others](https://agentprime.io/advisories/CVE-2026-106175.md)
  `CVE-2026-106175` · CVE record: Fortinet FortiOS and 2 more · CVSS 2.1 Low · Not analysed yet · Published 13 Oct 2026 · Tags: Memory corruption
- [Fortinet FortiSwitch: A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote…](https://agentprime.io/advisories/CVE-2024-48887.md)
  `CVE-2024-48887` · CVE record: Fortinet FortiSwitch · CVSS 9.3 Critical · Critical (CVSS 9+, CVSS 7+ and EPSS) · EPSS 0.16 · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-620
- [A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the \`Host\` header points to an arbitr…](https://agentprime.io/advisories/CVE-2022-23439.md)
  `CVE-2022-23439` · CVE record: Fortinet FortiTester and 4 more · CVSS 4.1 Medium · Not analysed yet · Published 22 Jan 2025 · Tags: CWE-610
- [Hard-coded cryptographic key in Fortinet FortiSwitch](https://agentprime.io/advisories/CVE-2023-37936.md)
  `CVE-2023-37936` · CVE record: Fortinet FortiSwitch · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jan 2025 · Tags: Hard-coded credentials
- [OS command injection in Fortinet FortiSwitch](https://agentprime.io/advisories/CVE-2023-37937.md)
  `CVE-2023-37937` · CVE record: Fortinet FortiSwitch · CVSS 7.6 High · Not analysed yet · Published 14 Jan 2025 · Tags: Command injection
- [Cross-site request forgery in Fortinet FortiVoice and others](https://agentprime.io/advisories/CVE-2022-27488.md)
  `CVE-2022-27488` · CVE record: Fortinet FortiVoice and 4 more · CVSS 7.5 High · Not analysed yet · Published 13 Dec 2023 · Tags: Cross-site request forgery (CSRF)
- [Information disclosure in Fortinet FortiManager and others](https://agentprime.io/advisories/CVE-2022-27490.md)
  `CVE-2022-27490` · CVE record: Fortinet FortiManager and 3 more · CVSS 5.1 Medium · Not analysed yet · Published 7 Mar 2023 · Tags: Information disclosure
- [Improper signature verification in Fortinet FortiSwitch and others](https://agentprime.io/advisories/CVE-2021-43074.md)
  `CVE-2021-43074` · CVE record: Fortinet FortiSwitch and 3 more · CVSS 4.1 Medium · Not analysed yet · Published 16 Feb 2023 · Tags: Weak cryptography or TLS
- [Buffer overflow in Fortinet FortiOS and others](https://agentprime.io/advisories/CVE-2021-42757.md)
  `CVE-2021-42757` · CVE record: Fortinet FortiOS and 4 more · CVSS 6.3 Medium · Not analysed yet · Published 8 Dec 2021 · Tags: Memory corruption
- [A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exha…](https://agentprime.io/advisories/CVE-2021-26111.md)
  `CVE-2021-26111` · CVE record: Fortinet Fortinet FortiSwitch · CVSS 6.5 Medium · Not analysed yet · Published 1 Jun 2021
- [Fortinet FortiSwitch: An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11…](https://agentprime.io/advisories/CVE-2019-17657.md)
  `CVE-2019-17657` · CVE record: Fortinet FortiSwitch and 3 more · No CVSS score · Not analysed yet · Published 7 Apr 2020

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=fortinet-fortiswitch>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/fortinet-fortiswitch/>. Everything for agents: <https://agentprime.io/llms.txt>.