Vulnerabilities
Vulnerabilities affecting firewalls and security appliances, with vendor fix data, CISA KEV status and EPSS.
Intelligence updated 29 Sept 2026, 06:17 UTC
259 vulnerabilities
Cisco ASA and FTD Denial of Service Vulnerability
High8.6CVSS 3.1, High71%PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
Critical10CVSS 3.1, Critical100%- CVE-2024-338510 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled
High7.5CVSS 3.1, High0.91% - CVE-2024-338410 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets
High7.5CVSS 3.1, High0.89% - CVE-2024-338310 Apr 2024
PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
Critical9.1CVSS 3.1, Critical0.58% - CVE-2024-338210 Apr 2024
PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets
High7.5CVSS 3.1, High0.93% - CVE-2023-416779 Apr 2024
A insufficiently protected credentials in Fortinet FortiProxy 7.4.0, 7.2.0 through 7.2.6, 7.0.0 through 7.0.1…
High8.8CVSS 3.1, High0.75% - CVE-2024-236629 Apr 2024
An exposure of sensitive information to an unauthorized actor in Fortinet FortiOS at least version at least 7…
High7.5CVSS 3.1, High0.70% - CVE-2023-4671712 Mar 2024
An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and be…
High8.8CVSS 3.1, High0.64% Fortinet FortiClient EMS SQL Injection Vulnerability
Critical9.8CVSS 3.1, Critical98%- CVE-2023-4278912 Mar 2024
A out-of-bounds write vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.5, For…
Critical9.8CVSS 3.1, Critical3% - CVE-2023-4279012 Mar 2024
A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.…
High8.1CVSS 3.1, High1% - CVE-2023-3655412 Mar 2024
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 …
Critical9.8CVSS 3.1, Critical0.77% - CVE-2023-2918022 Feb 2024
A null pointer dereference in Fortinet FortiOS version 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 throu…
High7.5CVSS 3.1, High3% - CVE-2023-2918122 Feb 2024
A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6…
High8.8CVSS 3.1, High0.72% - CVE-2023-4279120 Feb 2024
A relative path traversal in Fortinet FortiManager version 7.4.0 and 7.2.0 through 7.2.3 and 7.0.0 through 7.…
High8.8CVSS 3.1, High3% Fortinet Multiple Products Format String Vulnerability
Critical9.8CVSS 3.1, Critical62%- CVE-2024-000814 Feb 2024
PAN-OS: Insufficient Session Expiration Vulnerability in the Web Interface
High8.8CVSS 3.1, High0.50% Fortinet FortiOS Out-of-Bound Write Vulnerability
Critical9.8CVSS 3.1, Critical83%- CVE-2023-4425010 Jan 2024
An improper privilege management vulnerability [CWE-269] in a Fortinet FortiOS HA cluster version 7.4.0 throu…
High8.8CVSS 3.1, High0.90% Cisco IOS XE Web UI Command Injection Vulnerability
High7.2CVSS 3.1, High90%Cisco IOS XE Web UI Privilege Escalation Vulnerability
Critical10CVSS 3.1, Critical100%Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability
Medium6.6CVSS 3.1, Medium2%Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
Critical9.1CVSS 3.1, Critical25%Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, Critical86%Cisco Small Business RV Series Routers Command Injection Vulnerability
High7.2CVSS 3.1, High54%Fortinet FortiOS Path Traversal Vulnerability
High7.1CVSS 3.1, High11%Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability
Critical9.8CVSS 3.1, Critical99%Fortinet Multiple Products Authentication Bypass Vulnerability
Critical9.8CVSS 3.1, Critical100%Cisco SD-WAN Software Privilege Escalation Vulnerability
High7.8CVSS 3.1, High12%