Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Fortinet
Fortiauthenticator

Fortinet FortiAuthenticator Vulnerabilities: CVEs, CISA KEV & Security Advisories

24 CVEs

Fortinet FortiAuthenticator Vulnerabilities

CVE security advisories and vulnerability history for FortiAuthenticator by Fortinet.

24

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

5

Public exploits

With known exploit

5.4

Avg CVSS

2014–2026

Last updated May 12, 2026

Overview

Fortinet FortiAuthenticator has 24 published CVE records since 2014, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 5 have a known public exploit. The average CVSS base score across scored CVEs is 5.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting Fortinet FortiAuthenticator, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of Fortinet FortiAuthenticator's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium10

Low3

8 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

0

None of Fortinet FortiAuthenticator's CVEs are currently listed in CISA's KEV catalog.

Public exploits

5

5 of Fortinet FortiAuthenticator's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every Fortinet FortiAuthenticator version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

5.5.01 CVE
6.1.01 CVE
8.0.01 CVE
8.0.21 CVE

Fixed in

Find a version

24 CVEs

Sort

Critical vulnerability · 2026-05-12
CVE-2026-44277
Patch
CWE-284
Critical · CVSS 9.1
EPSS 0.1% (29th pct)2026-05-12
Medium vulnerability · 2026-02-10
CVE-2026-21743
Patch
CWE-862
Medium · CVSS 6.8
EPSS 0.0% (6th pct)2026-02-10
Low vulnerability · 2025-12-09
CVE-2025-57823
Patch
CWE-425
Low · CVSS 2.6
EPSS 0.0% (11th pct)2025-12-09
Low vulnerability · 2025-12-09
CVE-2025-59923
Patch
CWE-284
Low · CVSS 2.6
EPSS 0.0% (11th pct)2025-12-09
Medium vulnerability · 2025-01-22
CVE-2022-23439
Patch
CWE-610
Medium · CVSS 4.1
EPSS 0.2% (43th pct)2025-01-22
Medium vulnerability · 2024-06-11
CVE-2024-26010
Patch
CWE-121
Medium · CVSS 6.7
EPSS 0.2% (46th pct)2024-06-11
Medium vulnerability · 2024-06-03
CVE-2024-23664
Patch
CWE-601
Medium · CVSS 5.8
EPSS 0.3% (56th pct)2024-06-03
Medium vulnerability · 2023-07-11
CVE-2022-22302
Patch
CWE-312
Medium · CVSS 5.3
EPSS 0.1% (26th pct)2023-07-11
Medium vulnerability · 2023-04-11
CVE-2022-35850
Patch
CWE-80
Medium · CVSS 4.2
EPSS 1.0% (77th pct)2023-04-11
Low vulnerability · 2023-03-09
CVE-2023-26208
Patch
CWE-307
Low · CVSS 3.5
EPSS 19.7% (96th pct)2023-03-09
Medium vulnerability · 2022-04-06
CVE-2021-26116
Patch
Medium · CVSS 6.7
EPSS 0.2% (48th pct)2022-04-06
Medium vulnerability · 2022-02-02
CVE-2021-36177
Patch
Medium · CVSS 4.2
EPSS 0.2% (37th pct)2022-02-02
Medium vulnerability · 2021-12-09
CVE-2021-43068
Medium · CVSS 5.4
EPSS 0.2% (45th pct)2021-12-09
High vulnerability · 2021-12-08
CVE-2021-43067
High · CVSS 8.3
EPSS 0.4% (61th pct)2021-12-08
High vulnerability · 2021-08-04
CVE-2021-22124
Patch
High · CVSS 7.5
EPSS 1.1% (79th pct)2021-08-04
Medium vulnerability · 2021-07-06
CVE-2021-24005
Patch
Medium · CVSS 4.0
EPSS 0.1% (32th pct)2021-07-06
Vulnerability · 2020-01-07
CVE-2019-16154
Unscored
EPSS 0.4% (64th pct)2020-01-07
Vulnerability · 2018-05-31
CVE-2018-9186
Patch
Unscored
EPSS 0.3% (50th pct)2018-05-31
Vulnerability · 2015-02-03
CVE-2015-1459
Public exploit
Unscored
EPSS 0.4% (62th pct)2015-02-03
Vulnerability · 2015-02-03
CVE-2015-1458
Public exploit
Unscored
EPSS 0.1% (20th pct)2015-02-03
Vulnerability · 2015-02-03
CVE-2015-1457
Public exploit
Unscored
EPSS 0.1% (23th pct)2015-02-03
Vulnerability · 2015-02-03
CVE-2015-1456
Public exploit
Unscored
EPSS 0.3% (51th pct)2015-02-03
Vulnerability · 2015-02-03
CVE-2015-1455
Public exploit
Unscored
EPSS 0.7% (73th pct)2015-02-03
Vulnerability · 2014-04-30
CVE-2013-6990
Unscored
EPSS 0.3% (57th pct)2014-04-30

Common weakness types

The CWE weakness categories most often found in Fortinet FortiAuthenticator CVEs. Follow any weakness for its full explanation.

CWE-284Improper Access Control2 CVEs
CWE-307Improper Restriction of Excessive Authentication Attempts1 CVE
CWE-312Cleartext Storage of Sensitive Information1 CVE
CWE-425Direct Request ('Forced Browsing')1 CVE
CWE-601URL Redirection to Untrusted Site ('Open Redirect')1 CVE
CWE-610Externally Controlled Reference to a Resource in Another Sphere1 CVE
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1 CVE
CWE-121Stack-based Buffer Overflow1 CVE

Disclosure activity by year

How many Fortinet FortiAuthenticator CVEs were published each year.

2014

1

2015

5

2018

1

2020

1

2021

4

2022

2

2023

3

2024

2

2025

3

2026

2

Other Fortinet products

Browse vulnerabilities for other products by Fortinet.

FortiOS273 CVEs Fortinet191 CVEs FortiWeb125 CVEs FortiProxy122 CVEs FortiManager119 CVEs FortiAnalyzer96 CVEs forticlient87 CVEs FortiSandbox59 CVEs

All Fortinet vulnerabilities

Frequently asked questions

Common questions about Fortinet FortiAuthenticator vulnerabilities.

How many CVEs does Fortinet FortiAuthenticator have?

Fortinet FortiAuthenticator has 24 published CVE records since 2014.

How many Fortinet FortiAuthenticator CVEs are in CISA KEV?

None of Fortinet FortiAuthenticator's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Fortinet FortiAuthenticator vulnerabilities?

Yes — 5 of Fortinet FortiAuthenticator's CVEs have a known public exploit.

Which versions of Fortinet FortiAuthenticator are affected?

43 distinct Fortinet FortiAuthenticator versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Fortinet FortiAuthenticator CVEs?

Fortinet FortiAuthenticator's CVEs most often map to these CWE weakness types: CWE-284 (Improper Access Control), CWE-307 (Improper Restriction of Excessive Authentication Attempts), CWE-312 (Cleartext Storage of Sensitive Information), CWE-425 (Direct Request ('Forced Browsing')).

How many critical Fortinet FortiAuthenticator vulnerabilities are there?

Fortinet FortiAuthenticator has 1 critical and 2 high-severity CVEs.

What is the average severity of Fortinet FortiAuthenticator CVEs?

The average CVSS base score across Fortinet FortiAuthenticator's scored CVEs is 5.4.

References

All Fortinet vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Fortinet FortiAuthenticator vulnerabilities

Monitor new Fortinet FortiAuthenticator vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References