773 PoCs | 119 CISA KEV

tag

FortiOS

CVE-2022-40684 — FortiOS / FortiProxy / FortiSwitchManager Authentication Bypass (vamp-forticheck Scanner) KEV RW EPSS 100%

CVE-2022-40684 network Unverified

CVE-2022-40684networkCRITICAL 9.8Unverified2026-07-31FortiOS/FortiProxy/FortiSwitchManager/FortiWeb FortiCloud SSO Authentication Bypass Detection Tool (CVE-2025-59718) KEV EPSS 69%

CVE-2025-59718 (Fortinet advisory FG-IR-25-647; related: CVE-2025-59719) network Patched

CVE-2025-59718networkCRITICAL 9.8Patched2026-07-06Fortinet FortiCloud SSO Authentication Bypass KEV EPSS 69%

CVE-2025-59718, CVE-2025-59719 (Advisory: FG-IR-25-647) network Unverified

CVE-2025-59718, CVE-2025-59719networkCRITICAL 9.8Unverified2026-05-17Fortinet FortiOS SSL VPN Unauthenticated RCE (CVE-2024-21762) KEV RW EPSS 84%

CVE-2024-21762 web Patched

CVE-2024-21762webCRITICAL 9.6Patched2026-05-16Fortinet FortiOS / FortiProxy Authentication Bypass (CVE-2024-55591) KEV RW EPSS 98%

CVE-2024-55591 (Fortinet FG-IR-24-535) web Unverified

CVE-2024-55591webCRITICAL 9.6Unverified2026-05-16