boxscore/security
PRODUCT · referenceProducts · latest edition

Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

FortiOS

Product reference — FortiOS by Fortinet · sector: Network & Infrastructure. Cumulative disclosure record for this product across the archive.

Follow FortiOS — Atom feed

Product totals

Disclosures & known-exploited
All-timeYTD
CVEs4517
KEV entries113
Rate & severity
KEV/100Med CVSSMed EPSSCHML
24.46.3.004285248

KEV/100 = KEV entries ÷ CVEs × 100. Med CVSS / Med EPSS are medians over this product's disclosures. C/H/M/L = disclosures by CVSS severity band.

Monthly disclosures

Trend (by first-seen month, full archive): ▂▁▂▁▁▂▁▁▁▁▁▁▁▃▁▁▁▁▁▁▁▁▂▁▃▁▂▂▁▄▂▃▁█▄▂▃▁▁▁▂▂█▄▃▁

Last 12 months (new CVEs by first-seen day)
MonthNew CVEs
2025-113
2025-121
2026-012
2026-020
2026-030
2026-040
2026-051
2026-061
2026-078
2026-083
2026-092
2026-100

Notable CVEs

Ranked by the published formula: KEV → EPSS → CVSS → CVE ID.

Notable (ranked)
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2022-424759.399.9CRITICALYES2023-01-02
CVE-2024-555919.899.8CRITICALYES2025-01-14
CVE-2026-248589.499.7CRITICALYES2026-01-27
CVE-2023-279979.899.7CRITICALYES2023-06-13
CVE-2024-217629.899.7CRITICALYES2024-02-09
CVE-2025-597189.199.3CRITICALYES2025-12-16
CVE-2024-231139.899.2CRITICALYES2024-02-15
CVE-2025-686865.998.1MEDIUMYES2026-07-27
CVE-2022-413286.595.7MEDIUMYES2023-03-07
CVE-2025-244728.194.2HIGHYES2025-03-18
CVE-2025-252499.889.9CRITICALYES2026-01-13
CVE-2024-505624.465.8MEDIUM—2025-06-10
CVE-2024-529633.553.9LOW—2025-01-14
CVE-2025-577406.750.6MEDIUM—2025-10-14
CVE-2026-598376.650.3MEDIUM—2026-07-14

Recent CVEs

Most recently seen
CVECVSSEPSS %ileSeverityKEVFirst seen
CVE-2026-843938.114.6HIGH—2026-09-08
CVE-2026-843922.740.4LOW—2026-09-08
CVE-2026-704665.321.8MEDIUM—2026-08-12
CVE-2026-714078.134.3HIGH—2026-08-12
CVE-2026-714085.332.3MEDIUM—2026-08-12
CVE-2025-686865.998.1MEDIUMYES2026-07-27
CVE-2026-598404.322.1MEDIUM—2026-07-14
CVE-2026-598395.515.1MEDIUM—2026-07-14
CVE-2026-598376.650.3MEDIUM—2026-07-14
CVE-2026-235736.130.3MEDIUM—2026-07-14
CVE-2025-628264.328.9MEDIUM—2026-07-14
CVE-2025-626754.317.6MEDIUM—2026-07-14
CVE-2025-438924.329.9MEDIUM—2026-07-14
CVE-2025-678626.73.5MEDIUM—2026-06-09
CVE-2025-538448.845.0HIGH—2026-05-12

KEV entries

CISA Known Exploited Vulnerabilities (newest addition first)
CVEKEV addedCVSSEPSS %ileSeverity
CVE-2025-252492026-09-099.889.9CRITICAL
CVE-2025-686862026-07-275.998.1MEDIUM
CVE-2026-248582026-01-279.499.7CRITICAL
CVE-2025-597182025-12-169.199.3CRITICAL
CVE-2025-244722025-03-188.194.2HIGH
CVE-2024-555912025-01-149.899.8CRITICAL
CVE-2024-231132024-10-099.899.2CRITICAL
CVE-2024-217622024-02-099.899.7CRITICAL
CVE-2023-279972023-06-139.899.7CRITICAL
CVE-2022-413282023-03-146.595.7MEDIUM
CVE-2022-424752022-12-139.399.9CRITICAL

Related

Vendor: Fortinet — all products and the full vendor record.

Methodology

A product is a (vendor, product) pair as named in the affected-product data. Rate statistics are arithmetic over published figures. Counts key to first-seen day. Raw counts are not comparable across products; this is a reference page assembled from the public record, not a ranking by our judgment.

Sources. CVE Program (cvelistV5), NVD (NIST), CISA KEV, FIRST EPSS.