Fortinet
CVE-2026-24858: FortiCloud SSO cross-account authentication bypassNew!!
CISA lists CVE-2026-24858 as exploited. TechGeeks action notice for FortiCloud SSO cross-account authentication bypass, with scope, remediation, investigation guidance, and official sources.
CVE-2026-35616: FortiClient EMS unauthenticated access-control bypass to code executionNew!!
CISA lists CVE-2026-35616 as exploited. TechGeeks action notice for FortiClient EMS unauthenticated access-control bypass to code execution, with scope, remediation, investigation guidance, and official sources.
CVE-2026-21643: Fortinet FortiClient EMS SQL Injection VulnerabilityNew!!
CISA lists CVE-2026-21643 as exploited. TechGeeks action notice for Fortinet FortiClient EMS SQL Injection Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor VulnerabilityNew!!
CISA lists CVE-2025-68686 as exploited. TechGeeks action notice for Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability, with scope, remediation, investigation guidance, and official sources.
CVE-2026-39808: FortiSandbox unauthenticated command injectionNew!!
CISA lists CVE-2026-39808 as exploited. TechGeeks action notice for FortiSandbox unauthenticated command injection, with scope, remediation, investigation guidance, and official sources.
CVE-2026-25089: FortiSandbox second-order command injectionNew!!
CISA lists CVE-2026-25089 as exploited. TechGeeks action notice for FortiSandbox second-order command injection, with scope, remediation, investigation guidance, and official sources.
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow VulnerabilityNew!!
CISA lists CVE-2025-25249 as exploited. TechGeeks action notice for Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability, with scope, remediation, investigation guidance, and official sources.