Fortinet FortiAuthenticator vulnerabilities

29 published CVEs name Fortinet FortiAuthenticator among the affected products.

Atom feed of new CVEs

29Published CVEs29 of them scored
23Last 12 monthspublished in the last year
3Critical16 more rated high
0Known exploitedin CISA's KEV catalog

Newest CVEs

CVE-2026-126257
A use of hard-coded password vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
Fortinet · FortiAuthenticator
Critical9.0
CVE-2026-121526
A url redirection to untrusted site ('open redirect') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10…
Fortinet · FortiAuthenticator
Medium5.8
CVE-2026-126252
A improper neutralization of special elements used in an sql command ('sql injection') vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3,…
Fortinet · FortiAuthenticator
High8.3
CVE-2026-126251
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an attacker to…
Fortinet · FortiAuthenticator
Critical9.1
CVE-2026-126250
A incorrect authorization vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
Fortinet · FortiAuthenticator
High8.2
CVE-2026-126248
A insufficiently protected credentials vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
Fortinet · FortiAuthenticator
High7.5
CVE-2026-126246
A null pointer dereference vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
Fortinet · FortiAuthenticator
High7.5
CVE-2026-126249
A improper privilege management vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an…
Fortinet · FortiAuthenticator
High7.2
CVE-2026-126247
A use of externally-controlled format string vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may…
Fortinet · FortiAuthenticator
High7.2
CVE-2026-126245
A out-of-bounds write vulnerability in Fortinet FortiAuthenticator 8.0.0 through 8.0.3, FortiAuthenticator 6.6.0 through 6.6.10 may allow an unauthenticated…
Fortinet · FortiAuthenticator
High8.1

All 29 in the list