Advisories · Technology

Fortinet FortiSwitch.

Every CVE that names Fortinet FortiSwitch among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-106175 CVE record

CVSS 2.1 Low

Double free in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiSwitch
- Memory corruption
Not analysed yet 13 Oct 2026
CVE-2024-48887 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

Fortinet FortiSwitch: A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote…
- Fortinet FortiSwitch
- CWE-620
Not analysed yet 8 Apr 2025
CVE-2022-23439 CVE record

CVSS 4.1 Medium

A externally controlled reference to a resource in another sphere vulnerability in Fortinet allows attacker to poison web caches via crafted HTTP requests, where the `Host` header points to an arbitr…
- Fortinet FortiTester
- Fortinet FortiOS
- CWE-610
Not analysed yet 22 Jan 2025
CVE-2023-37936 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Hard-coded cryptographic key in Fortinet FortiSwitch
- Fortinet FortiSwitch
- Hard-coded credentials
Not analysed yet 14 Jan 2025
CVE-2023-37937 CVE record

CVSS 7.6 High

OS command injection in Fortinet FortiSwitch
- Fortinet FortiSwitch
- Command injection
Not analysed yet 14 Jan 2025
CVE-2022-27488 CVE record

CVSS 7.5 High

Cross-site request forgery in Fortinet FortiVoice and others
- Fortinet FortiVoice
- Fortinet FortiRecorder
- Cross-site request forgery (CSRF)
Not analysed yet 13 Dec 2023
CVE-2022-27490 CVE record

CVSS 5.1 Medium

Information disclosure in Fortinet FortiManager and others
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- Information disclosure
Not analysed yet 7 Mar 2023
CVE-2021-43074 CVE record

CVSS 4.1 Medium

Improper signature verification in Fortinet FortiSwitch and others
- Fortinet FortiSwitch
- Fortinet FortiWeb
- Weak cryptography or TLS
Not analysed yet 16 Feb 2023
CVE-2021-42757 CVE record

CVSS 6.3 Medium

Buffer overflow in Fortinet FortiOS and others
- Fortinet FortiOS
- Fortinet FortiDDoS-F
- Memory corruption
Not analysed yet 8 Dec 2021
CVE-2021-26111 CVE record

CVSS 6.5 Medium

A missing release of memory after effective lifetime vulnerability in FortiSwitch 6.4.0 to 6.4.6, 6.2.0 to 6.2.6, 6.0.0 to 6.0.6, 3.6.11 and below may allow an attacker on an adjacent network to exha…
- Fortinet FortiSwitch
Not analysed yet 1 Jun 2021
CVE-2019-17657 CVE record

Fortinet FortiSwitch: An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11…
- Fortinet FortiSwitch
- FortiAnalyzer
Not analysed yet 7 Apr 2020