# Fortinet Fortianalyzer


- [CVE-2026-24858](https://insights.sbomify.com/CVE-2026-24858/): Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel (critical 9.4, exploited in the wild)
- [CVE-2023-25610](https://insights.sbomify.com/CVE-2023-25610/): Memory corruption in FortiAnalyzer (critical 9.3)
- [CVE-2021-32603](https://insights.sbomify.com/CVE-2021-32603/): Server-side request forgery in Fortinet FortiAnalyzer, FortiManager (high 8.8)
- [CVE-2020-12817](https://insights.sbomify.com/CVE-2020-12817/): Cross-site scripting in Fortinet FortiAnalyzer (high 8.8)
- [CVE-2024-48886](https://insights.sbomify.com/CVE-2024-48886/): Auth bypass in FortiOS (high 8.0)
- [CVE-2022-39950](https://insights.sbomify.com/CVE-2022-39950/): Cross-site scripting in Fortinet FortiAnalyzer, FortiManager (high 8.0)
- [CVE-2021-26104](https://insights.sbomify.com/CVE-2021-26104/): Command injection in Fortinet FortiManager, FortiAnalyzer, FortiPortal (high 7.8)
- [CVE-2021-32589](https://insights.sbomify.com/CVE-2021-32589/): Use after free in FortiAnalyzer (high 7.7)
- [CVE-2023-42788](https://insights.sbomify.com/CVE-2023-42788/): Command injection in FortiAnalyzer (high 7.6)
- [CVE-2020-9289](https://insights.sbomify.com/CVE-2020-9289/): Hardcoded credentials in Fortinet FortiManager (high 7.5)
- [CVE-2019-17657](https://insights.sbomify.com/CVE-2019-17657/): Denial of service in FortiAP-S/W2 (high 7.5)
- [CVE-2023-25607](https://insights.sbomify.com/CVE-2023-25607/): Command injection in FortiADC (high 7.4)

---
From sbomify Insights: https://insights.sbomify.com/products/fortinet/fortianalyzer/