# Fortinet Fortiproxy


- [CVE-2024-23113](https://insights.sbomify.com/CVE-2024-23113/): Fortinet Multiple Products Format String (critical 9.8, exploited in the wild)
- [CVE-2022-40684](https://insights.sbomify.com/CVE-2022-40684/): Fortinet Multiple Products Authentication Bypass (critical 9.8, exploited in the wild)
- [CVE-2024-55591](https://insights.sbomify.com/CVE-2024-55591/): Fortinet FortiOS and FortiProxy Authentication Bypass (critical 9.6, exploited in the wild)
- [CVE-2024-21762](https://insights.sbomify.com/CVE-2024-21762/): Fortinet FortiOS Out-of-Bound Write (critical 9.6, exploited in the wild)
- [CVE-2026-24858](https://insights.sbomify.com/CVE-2026-24858/): Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel (critical 9.4, exploited in the wild)
- [CVE-2022-42475](https://insights.sbomify.com/CVE-2022-42475/): Fortinet FortiOS Heap-Based Buffer Overflow (critical 9.3, exploited in the wild)
- [CVE-2023-27997](https://insights.sbomify.com/CVE-2023-27997/): Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow (critical 9.2, exploited in the wild)
- [CVE-2025-59718](https://insights.sbomify.com/CVE-2025-59718/): Fortinet Multiple Products Improper Verification of Cryptographic Signature (critical 9.1, exploited in the wild)
- [CVE-2018-13379](https://insights.sbomify.com/CVE-2018-13379/): Fortinet FortiOS SSL VPN Path Traversal (critical 9.1, exploited in the wild)
- [CVE-2018-13382](https://insights.sbomify.com/CVE-2018-13382/): Fortinet FortiOS and FortiProxy Improper Authorization (critical 9.1, exploited in the wild)
- [CVE-2025-24472](https://insights.sbomify.com/CVE-2025-24472/): Fortinet FortiOS and FortiProxy Authentication Bypass (high 8.1, exploited in the wild)
- [CVE-2025-61624](https://insights.sbomify.com/CVE-2025-61624/): Fortinet Multiple Products Path Traversal (medium 5.4, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/products/fortinet/fortiproxy/