Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

FortiOS

Product reference — FortiOS by Fortinet · sector: Network & Infrastructure. Cumulative disclosure record for this product across the archive.

Follow FortiOS — Atom feed

Product totals

Disclosures & known-exploited
	All-time	YTD
CVEs	47	19
KEV entries	12	4

Rate & severity
KEV/100	Med CVSS	Med EPSS	C	H	M	L
25.5	6.5	.0049	8	9	24	6

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▂▁▁▂▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▂▁▃▁▂▂▁▄▂▃▁█▄▂▃▁▁▂▂▂█▄▃▂

Last 12 months (new CVEs by first-seen day)
Month	New CVEs
2025-11	3
2025-12	1
2026-01	2
2026-02	0
2026-03	0
2026-04	1
2026-05	1
2026-06	1
2026-07	8
2026-08	3
2026-09	2
2026-10	1

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVE	CVSS	EPSS %ile	Severity	KEV	First seen
CVE-2022-42475	9.3	99.9	CRITICAL	YES	2023-01-02
CVE-2024-55591	9.8	99.8	CRITICAL	YES	2025-01-14
CVE-2026-24858	9.4	99.7	CRITICAL	YES	2026-01-27
CVE-2023-27997	9.8	99.7	CRITICAL	YES	2023-06-13
CVE-2024-21762	9.8	99.7	CRITICAL	YES	2024-02-09
CVE-2025-59718	9.1	99.3	CRITICAL	YES	2025-12-16
CVE-2024-23113	9.8	99.2	CRITICAL	YES	2024-02-15
CVE-2025-68686	5.9	98.2	MEDIUM	YES	2026-07-27
CVE-2022-41328	6.5	95.8	MEDIUM	YES	2023-03-07
CVE-2025-24472	8.1	94.3	HIGH	YES	2025-03-18
CVE-2025-25249	9.8	89.9	CRITICAL	YES	2026-01-13
CVE-2025-61624	6.5	64.6	MEDIUM	YES	2026-04-14
CVE-2024-50562	4.4	66.6	MEDIUM	—	2025-06-10
CVE-2026-84392	2.7	64.4	LOW	—	2026-09-08
CVE-2024-52963	3.5	54.6	LOW	—	2025-01-14

Recent CVEs

Most recently seen
CVE	CVSS	EPSS %ile	Severity	KEV	First seen
CVE-2026-106175	2.3	0.7	LOW	—	2026-10-13
CVE-2026-84393	8.1	18.9	HIGH	—	2026-09-08
CVE-2026-84392	2.7	64.4	LOW	—	2026-09-08
CVE-2026-71408	5.3	34.6	MEDIUM	—	2026-08-12
CVE-2026-71407	8.1	42.5	HIGH	—	2026-08-12
CVE-2026-70466	5.3	22.3	MEDIUM	—	2026-08-12
CVE-2025-68686	5.9	98.2	MEDIUM	YES	2026-07-27
CVE-2026-59840	4.3	22.7	MEDIUM	—	2026-07-14
CVE-2026-59839	5.5	15.4	MEDIUM	—	2026-07-14
CVE-2026-59837	6.6	51.0	MEDIUM	—	2026-07-14
CVE-2026-23573	6.1	30.9	MEDIUM	—	2026-07-14
CVE-2025-62826	4.3	29.6	MEDIUM	—	2026-07-14
CVE-2025-62675	4.3	18.0	MEDIUM	—	2026-07-14
CVE-2025-43892	4.3	30.5	MEDIUM	—	2026-07-14
CVE-2025-67862	6.7	3.7	MEDIUM	—	2026-06-09

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVE	KEV added	CVSS	EPSS %ile	Severity
CVE-2025-61624	2026-10-16	6.5	64.6	MEDIUM
CVE-2025-25249	2026-09-09	9.8	89.9	CRITICAL
CVE-2025-68686	2026-07-27	5.9	98.2	MEDIUM
CVE-2026-24858	2026-01-27	9.4	99.7	CRITICAL
CVE-2025-59718	2025-12-16	9.1	99.3	CRITICAL
CVE-2025-24472	2025-03-18	8.1	94.3	HIGH
CVE-2024-55591	2025-01-14	9.8	99.8	CRITICAL
CVE-2024-23113	2024-10-09	9.8	99.2	CRITICAL
CVE-2024-21762	2024-02-09	9.8	99.7	CRITICAL
CVE-2023-27997	2023-06-13	9.8	99.7	CRITICAL
CVE-2022-41328	2023-03-14	6.5	95.8	MEDIUM
CVE-2022-42475	2022-12-13	9.3	99.9	CRITICAL

Vendor: Fortinet — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.