CVE Watch—

CVE-2022-40684

Fortinet Multiple Products Authentication Bypass Vulnerability

CVSS

—

Sin CVSS

EPSS

100.0%

p100

KEV

SÍ

11 oct 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

100.0%EPSS · 30 días100.0%

2026-06-302026-07-16

Ficha del catálogo KEV

Producto

Fortinet / Multiple Products

Vulnerabilidad

Fortinet Multiple Products Authentication Bypass Vulnerability

Añadido a KEV

11 oct 2022

Remediar antes de

1 nov 2022

Uso conocido en ransomware

Sí

Descripción resumida

Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an authentication bypass vulnerability that could allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests.

Acción requerida

Apply updates per vendor instructions.

Notas

https://www.fortiguard.com/psirt/FG-IR-22-377; https://nvd.nist.gov/vuln/detail/CVE-2022-40684

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-24858—

99.7%

KEV—80Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability—CVE-2025-59718—

99.2%

KEV—80Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability—CVE-2024-23113—

99.1%

KEV—80Fortinet Multiple Products Format String Vulnerability—CVE-2025-32756—

98.1%

KEV—79Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability—