https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 10:54:50 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09052 bdu:2025-09052 https://cve.radiocsirt.org/vuln/bdu:2025-09052 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0293 certfr-2025-avi-0293 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0293 https://cve.radiocsirt.org/vuln/euvd-2026-350951 EUVD-2026-350951 https://cve.radiocsirt.org/vuln/euvd-2026-350951 https://cve.radiocsirt.org/vuln/fkie_cve-2024-32122 <p>A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.</p> <p>A storing passwords in a recoverable format in Fortinet FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-32122 https://cve.radiocsirt.org/vuln/ghsa-79gc-w327-w4f2 <p>A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1 allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.</p> <p>A storing passwords in a recoverable format in Fortinet FortiOS versions 7.2.0 through 7.2.1 allows attacker to information disclosure via modification of LDAP server IP to point to a malicious server.</p> https://cve.radiocsirt.org/vuln/ghsa-79gc-w327-w4f2 https://cve.radiocsirt.org/vuln/gsd-2024-32122 gsd-2024-32122 https://cve.radiocsirt.org/vuln/gsd-2024-32122 https://cve.radiocsirt.org/vuln/icsa-25-135-01 <p>An insufficiently protected credentials vulnerability in FortiOS may allow a privileged authenticated attacker to retrieve LDAP credentials via modifying the LDAP server IP address in the FortiOS configuration to point to a malicious attacker-controlled server. An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out. A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets. An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices. An Authentication Bypass Using an Alternate Path or Channel vulnerability in FortiOS and FortiProxy may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component. An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,…</p> <p>An insufficiently protected credentials vulnerability in FortiOS may allow a privileged authenticated attacker to retrieve LDAP credentials via modifying the LDAP server IP address in the FortiOS configuration to point to a malicious attacker-controlled server. An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions may allow an attacker in possession of a cookie used to log in the SSL-VPN portal to log in again, although the session has expired or was logged out. A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets. An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices. An Authentication Bypass Using an Alternate Path or Channel vulnerability in FortiOS and FortiProxy may allow an authenticated attacker to elevate their privileges via triggering a malicious Webhook action in the Automation Stitch component. An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below,…</p> https://cve.radiocsirt.org/vuln/icsa-25-135-01 https://cve.radiocsirt.org/vuln/ssa-864900 <p>Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products.</p> <p>Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.</p> <p>Fortinet has published information on vulnerabilities in FortiOS. This advisory lists the related Siemens Industrial products.</p> <p>Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version.</p> https://cve.radiocsirt.org/vuln/ssa-864900 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0761 <p>Ein lokaler Angreifer kann eine Schwachstelle in Fortinet FortiOS ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Fortinet FortiOS ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0761