Spremljamo ranljivosti v izdelkih največjih proizvajalcev, kot so Microsoft, Cisco, Fortinet, Citrix in drugi. Izberite proizvajalca za seznam njegovih aktivnih ranljivosti in naših člankov.
Fortinet: ranljivosti v zadnjem letu
| CVE | CVSS | EPSS | CISA KEV | Proizvajalec | Opis (NVD, angleško) |
|---|---|---|---|---|---|
| CVE-2026-35616 | 9,8 Kritično | 94,0 % | Aktivno izkoriščana od 6. 4. 2026 | Fortinet | A improper access control vulnerability in Fortinet FortiClientEMS 7.4.5 through 7.4.6 may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. |
| CVE-2025-64446 | 9,8 Kritično | 91,1 % | Aktivno izkoriščana od 14. 11. 2025 | Fortinet | A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands |
| CVE-2025-59718 | 9,8 Kritično | 68,3 % | Aktivno izkoriščana od 16. 12. 2025 | Fortinet, Siemens | A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, |
| CVE-2026-104286 | 9,8 Kritično | 4,6 % | Aktivno izkoriščana od 1. 10. 2026 | Fortinet | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated |
| CVE-2025-61624 | 6,5 Srednje | 1,3 % | Aktivno izkoriščana od 16. 10. 2026 | Fortinet, Siemens | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPA |
| CVE-2024-23108 | 9,8 Kritično | 80,3 % | – | Fortinet | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized code or commands via via crafted API requests. |
| CVE-2025-64155 | 9,8 Kritično | 43,6 % | – | Fortinet | An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 |
Naši članki: Fortinet
Objavljen PoC za kritično ranljivost obhoda avtentikacije v Fortinet FortiClient EMS
Za kritično ranljivost CVE-2026-35616 v Fortinet FortiClient EMS je bil objavljen javni PoC, ranljivost pa je uvrščena v katalog CISA KEV kot potrjeno izkoriščana. Podjetja, ki uporabljajo prizadete…
FortiBleed: FBI opozarja, da kampanja proti Fortinet napravam še vedno traja
FBI in ameriška tajna služba sta 6. oktobra 2026 objavila skupno varnostno obvestilo o kampanji FortiBleed, ki cilja na internetno izpostavljene Fortinet FortiGate požarne zidove in SSL VPN…
DEEPDATA Malware: Unpatched Fortinet Flaw Allows for VPN Credential Theft
BrazenBamboo Exploits Fortinet Vulnerability to Extract VPN Credentials In July 2024, a threat actor known as BrazenBamboo exploited a security flaw in Fortinet's FortiClient for Windows...
Fortinet Warns of Critical Vulnerability in FortiManager: Stay Protected from Active Exploitation
Critical Vulnerability in FortiManager: What You Need to Know Fortinet has confirmed a critical security flaw in FortiManager, which is actively being exploited in the wild....
CISA Warns of Critical Fortinet Flaw: Urgent Security Updates for Palo Alto and Cisco
Critical Vulnerability in Fortinet Products: What You Need to Know The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently added a significant security flaw affecting Fortinet...
Uncovering Cyber Threats: Chinese Hackers Exploit Zero-Days in Fortinet, Ivanti, and VMware
The Cyber Espionage Actor Strikes Again In the ever-evolving landscape of cybersecurity threats, a China-linked cyber espionage actor has reared its head once more. This time,...
Tedenski pregled kibernetske varnosti: kritične ranljivosti v ArubaOS, PHP in FortiSIEM ter AI agenti kot orodje napadalcev
Ta teden so prevladovale kritične ranljivosti v omrežni in poslovni infrastrukturi – od ArubaOS, PHP in FortiSIEM do Palo Alto Networks – obenem pa so poročila razkrila uporabo…
Javno objavljen PoC za kritično ranljivost FortiSIEM, ki omogoča oddaljeno izvajanje kode
Za kritično ranljivost CVE-2026-106173 v Fortinet FortiSIEM je bil objavljen dokaz koncepta (PoC), ki po navedbah The Hacker News omogoča neavtenticiranim napadalcem izvajanje poljubne kode. Fortinet je ranljivost…
Napadalci z ukradeno poverilnico ConnectWise vdrli v 173 najemnikov Microsoft 365
Neznani napadalci so z ukradeno poverilnico aplikacije ConnectWise Cloud Backup pridobili nepooblaščen dostop do 173 najemnikov Microsoft 365. ConnectWise je zaradi preiskave onemogočil sedem identitet aplikacije in zaustavil…