| 270396 | Fortinet FortiAnalyzer Heap Overflow in fgfmsd (FG-IR-24-442) | high |
| 270395 | Fortinet Fortigate Heap Overflow in fgfmsd (FG-IR-24-442) | high |
| 270363 | Fortinet Fortigate xss (FG-IR-24-542) | medium |
| 270362 | Fortinet Fortigate Improper autorization over static files (FG-IR-25-684) | medium |
| 270361 | Fortinet Fortigate import feature (FG-IR-23-354) | medium |
| 270360 | Fortinet Fortigate Multiple Unchecked Return Value leading to Null Pointer Dereference (FG-IR-25-653) | low |
| 270357 | Fortinet Fortigate Heap buffer overflow in websocket (FG-IR-24-546) | medium |
| 249173 | Fortinet FortiManager Arbitrary file overwrite in FGFMd (FG-IR-24-473) | medium |
| 249172 | Fortinet Fortigate Integer Overflow on SSL-VPN bookmarks (FG-IR-24-364) | medium |
| 249171 | Fortinet Fortigate Double free in automation-stitch (FG-IR-23-209) | medium |
| 249170 | Fortinet Fortigate Incorrect Privilege Assignment in Security Fabric (FG-IR-25-173) | high |
| 249169 | Fortinet Fortigate Weak authentication - FGFM protocol (FG-IR-24-042) | high |
| 242169 | Sophos XG Firewall <= 17.5.12 RCE | critical |
| 241983 | Fortinet FortiAnalyzer SQLi (FG-IR-24-437) | low |
| 241982 | Fortinet FortiManager SQLi (FG-IR-24-437) | low |
| 241567 | Fortinet Fortigate Heap-based buffer overflow in cw_stad daemon (FG-IR-25-026) | medium |
| 241531 | Fortinet Fortigate DNS type 65 resource record requests bypass DNS filter (FG-IR-24-053) | medium |
| 241530 | Fortinet Fortigate PKI via API: Authentication granted with an invalid certificate (FG-IR-24-511) | high |
| 241525 | Fortinet FortiWeb sqli (FG-IR-25-151) | critical |
| 238114 | Fortinet Fortigate Insufficient Session Expiration in SSL-VPN cookie (FG-IR-24-339) | medium |
| 238113 | Fortinet Fortigate Privilege escalation in automation-stitch (FG-IR-24-385) | medium |
| 238112 | Fortinet Fortigate eap-cert-auth bypass via revoked certificate (FG-IR-24-544) | medium |
| 238111 | Fortinet Fortigate SSH key is added even if operation is aborted (FG-IR-23-008) | low |
| 238110 | Fortinet Fortigate Weak authentication in security fabric daemon (FG-IR-24-058) | medium |
| 238105 | Fortinet Fortigate Firewall session injection in FGSP (FG-IR-24-287) | low |
| 238104 | Fortinet Fortigate Information Disclosure on SSLVPN endpoint (FG-IR-24-257) | medium |
| 238102 | Fortinet Fortigate Privilege escalation in GUI websocket module (FG-IR-25-006) | medium |
| 238101 | Fortinet FortiWeb Privilege escalation in GUI websocket module (FG-IR-25-006) | medium |
| 237023 | Zyxel USG FLEX H Series Firewall < 1.30 Privilege Escalation | high |
| 237022 | Zyxel USG FLEX H Series Firewall < 1.32 Privilege Escalation | medium |
| 237021 | Zyxel USG FLEX H Series Firewall 1.20 < 1.32 Privilege Escalation | high |
| 236971 | Fortinet FortiMail 7.0.x < 7.0.9 / 7.2.x < 7.2.8 / 7.4.x < 7.4.5 / 7.6.x < 7.6.3 API Stack-based Buffer Overflow (FG-IR-25-254) | critical |
| 235826 | Fortinet Fortigate TACACS+ authentication bypass (FG-IR-24-472) | critical |
| 235825 | Fortinet Fortigate Buffer over-read in FGFM (FG-IR-24-381) | low |
| 235823 | Fortinet Fortigate DoS in Security Fabric Root (FG-IR-24-388) | medium |
| 234007 | Fortinet FortiWeb Incorrect user management in widgets dashboard (FG-IR-24-184) | medium |
| 234006 | Fortinet Fortigate LDAP Clear-text credentials retrievable with IP modification (FG-IR-24-111) | medium |
| 234005 | Fortinet FortiWeb Directory Traversal (FG-IR-24-474) | high |
| 234004 | Fortinet FortiWeb No certificate name verification for fgfm connection (FG-IR-24-046) | high |
| 234003 | Fortinet Fortigate No certificate name verification for fgfm connection (FG-IR-24-046) | high |
| 232624 | Fortinet FortiWeb Web application firewall rules bypass by using an empty filename (FG-IR-23-115) | medium |
| 232603 | Fortinet FortiWeb Directory Traversal Arbitrary File Write (FG-IR-24-439) | medium |
| 232602 | Fortinet FortiWeb Multiple format string vulnerabilities (FG-IR-24-325) | high |
| 232601 | Fortinet Fortigate Multiple format string vulnerabilities (FG-IR-24-325) | high |
| 232300 | Fortinet FortiWeb RADIUS Protocol CVE-2024-3596 (FG-IR-24-255) | critical |
| 232299 | Fortinet Fortigate RADIUS Protocol CVE-2024-3596 (FG-IR-24-255) | critical |
| 232200 | SonicWall SonicOS Privilege Escalation (CVE-2024-53706) (SNWLID-2025-0003) | high |
| 232199 | SonicWall SonicOS SSRF (CVE-2024-53705) (SNWLID-2025-0003) | high |
| 232198 | SonicWall SonicOS Multiple Vulnerabilities (SNWLID-2025-0003) | critical |
| 216118 | Fortinet Fortigate - Format string vulnerability in CLI commands (FG-IR-23-261) | medium |
