1.CVE-2026-106173: Fortinet FortiSIEM gRPC Path Traversal to Pre-Auth RCE PoCvulnerability | Critical | 2026-10-20 12:43 | CVE-2026-106173 | github.com | Original ↗ | .md | #ai-security | #github | #authentication
2.API Authentication Bypass in FortiClient EMS 7.4.5-7.4.6–CVE-2026-35616vulnerability | Critical | Actively exploited | 2026-04-07 00:00 | CVE-2026-35616 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #authentication-bypass | #certificate-validation
3.CVE-2026-35616 & CVE-2026-21643 – Fortinet FortiClientEMS: Overview & Takeawaysvulnerability | 2026-04-07 00:00 | netspi.com | Original ↗ | .md | #rce | #sqli | #cve-2026-35616
4.Pre-Authentication SQL Injection in FortiClient EMS 7.4.4 - CVE-2026-21643vulnerability | Critical | Actively exploited | 2026-03-09 00:00 | CVE-2026-21643 | bishopfox.com | Original ↗ | .md | #vulnerability-research | #sql-injection | #web-security
5.CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEMvulnerability | 2026-01-13 18:02 | CVE-2025-64155 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #fortinet
6.CVE-2025-32756: Low-Rise Jeans are Back and so are Buffer Overflowsvulnerability | 2025-05-22 16:35 | CVE-2025-32756 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #fortinet
7.KeyPlug Server Exposes Fortinet Exploits & Webshell Activity Targeting a Major Japanese Companyblog | 2025-04-17 00:00 | hunt.io | Original ↗ | .md | #exploitation | #apt41 | #fortinet
8.BrazenBamboo Weaponizes FortiClient Vulnerability to Steal VPN Credentials via DEEPDATAresearch | 2024-11-15 14:50 | volexity.com | Original ↗ | .md | #zero-day | #vulnerability-research | #threat-intelligence
9.CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.Xvulnerability | 2024-06-04 11:42 | CVE-2023-48788 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #sql-injection | #exploit
10.CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Divevulnerability | 2024-05-28 12:08 | CVE-2024-23108 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #command-injection | #fortinet
11.CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Divevulnerability | 2024-05-20 11:44 | CVE-2023-34992 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #command-injection | #fortinet
12.Fortinet FortiWLM Deep-Dive, IOCs, and the Almost Story of the “Forti Forty”vulnerability | 2024-03-14 09:45 | CVE-2023-34993 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #sql-injection
13.Further Adventures in Fortinet Decryptionblog | 2024-03-08 00:00 | bishopfox.com | Original ↗ | .md | #reverse-engineering | #encryption | #tooling
14.February Fortinet Advisory: everything you need to knowblog | 2024-02-12 13:53 | wiz.io | Original ↗ | .md | #rce | #vulnerability | #fortinet
15.Building an Exploit for FortiGate Vulnerability CVE-2023-27997vulnerability | 2023-10-27 00:00 | CVE-2023-27997 | bishopfox.com | Original ↗ | .md | #exploit-development | #heap-overflow | #fortinet
16.Wiz and Fortinet announce partnership to deliver cloud-native security protectionblog | 2023-09-11 12:55 | wiz.io | Original ↗ | .md | #cloud | #cloud-security | #exposure-management
17.[CVE-2022-42475] Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần IIvulnerability | 2023-08-10 10:10 | CVE-2022-42475 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #heap-overflow | #fortinet
18.Hàng ngàn thiết bị sử dụng FortiOS và FortiProxy chưa cập nhật bản vá cho các lỗ hổng bảo mật nghiêm trọng - Phần Iblog | 2023-08-10 10:10 | blog.viettelcybersecurity.com | Original ↗ | .md | #rce | #vulnerability | #patching
19.Breaking Fortinet Firmware Encryptionblog | 2023-08-02 00:00 | bishopfox.com | Original ↗ | .md | #reverse-engineering | #firmware | #security-research
20.Fortinet FortiNAC CVE-2022-39952 Deep-Dive and IOCsvulnerability | 2023-02-21 12:40 | CVE-2022-39952 | horizon3.ai | Original ↗ | .md | #rce | #vulnerability-research | #fortinet
21.FortiOS, FortiProxy, and FortiSwitchManager Authentication Bypass Technical Deep Dive (CVE-2022-40684)vulnerability | 2022-10-13 16:45 | CVE-2022-40684 | horizon3.ai | Original ↗ | .md | #vulnerability-research | #fortinet | #fortios
22.Identity Attack Watch: May 2021blog | 2021-05-28 15:53 | semperis.com | Original ↗ | .md | #active-directory | #solarwinds | #news-roundup