Published file metadata, source observations, indicators, and research history in one bounded catalog.
50Reachable catalog records
2 / 3Current catalog page
24Maximum records per page
0Samples downloaded by this page
Feed collection status
Sources represented on this page. Publication and observation dates describe the content; successful batch dates describe local collection. A recent batch does not certify complete coverage or current provider availability.
src_3903b1582d75bc313fCollection status unverifiedLast successful batch: Unverified
Stale means older than twice the recorded collection interval, with a minimum of one hour; without an interval, the threshold is 24 hours. Cached content remains available while a feed is stale, paused, or unverified.
50 MATCHING RECORDSMETADATA ONLY / SOURCE ATTRIBUTION PRESERVED
CVSSv3 Score: 7.9 Linux kernel is impacted by CVE-2026-43284 and CVE-2026-43500 which chained together create the Dirty Frag vulnerability.CVE-2026-43284In the Linux kernel, the following vulnerability has been resolved: xfrm: esp: avoid in-place decrypt on shared skb frags MSG_SPLICE_PAGES can attach pages from a pipe directly to an skb. TCP marks such skbs with SKBFL_SHARED_FRAG after skb_splice
First reported Jun 03, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 6.7 An Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability [CWE-77] in FortiSandbox may allow a privileged attacker to execute unauthorized code or commands via crafted HTTP requests. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 9.1 An Improper Access Control vulnerability [CWE-284] in FortiAuthenticator may allow an unauthenticated attacker to execute unauthorized code or commands via crafted requests. Revised on 2026-05-12 00:00:00
First reported May 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.9 A Use of Uninitialized Variable [CWE-457] vulnerability in Fortinet FortiAnalyzer SNMP daemon may allow a remote authenticated attacker with user permission to cause a denial of service via SNMP GETBULK requests. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 9.6 An Inclusion of Sensitive Information in Source Code vulnerability [CWE-540] in FortiMonitorOnSight web portal may allow a remote unauthenticated attacker to bypass authentication via forged or reused JWT Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.9 CVE-2025-26466A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Cons
First reported Mar 11, 2025 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.1 A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiOS explicit proxy may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context of the WAD daemon via crafted sockets, only if the explicit proxy is configured with Kerberos authentication and SOCKS enabled. Revised on 2026-08-12 00:00:00
First reported Aug 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 7.5 An Authentication Bypass by Primary Weakness vulnerability [CWE-305] in FortiOS fnbamd may allow an unauthenticated attacker to bypass LDAP authentication of Agentless VPN or FSSO policy, under specific LDAP server configuration. Revised on 2026-07-04 00:00:00
First reported Feb 10, 2026 08:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 3.4 A Server-Side request forgery (SSRF) [CWE-918] vulnerability in FortiSIEM GUI may allow an authenticated attacker to send HTTP requests originating from the targeted device via specially crafted HTTP requests Revised on 2026-08-12 00:00:00
First reported Aug 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 2.8 An URL redirection to untrusted site ('open redirect') [CWE-601] vulnerability in FortiSIEM may allow an authenticated attacker to cause a redirection to any website via specially crafted HTTP requests Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 9.1 An improper authentication vulnerability [CWE-287] in the Fortinet Privileged Access Agent Chrome Extension may allow a remote unauthenticated attacker to proxy a user's browser traffic through attacker controlled servers if the user visits a malicious website. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 8.9 An improper access control vulnerability [CWE-284] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to access sensitive information via crafted HTTP requests. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 8.8 An Improper Authentication vulnerability [CWE-287] in the FortiWeb Remote Radius Type Admin Authentication configured with specific, non-default settings may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a random username and password Revised on 2026-08-12 00:00:00
First reported Aug 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 9.1 A missing authorization vulnerability [CWE-862] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to execute unauthorized code or commands via HTTP requests. Revised on 2026-05-12 00:00:00
First reported May 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 7.3 An improper certificate validation vulnerability [CWE-295] in FortiOS and FortiProxy Agentless ZTNA portal may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the ZTNA portal and the backend destination website. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 2.1 A Missing Authorization [CWE-862] in FortiClient Windows may allow an authenticated local attacker to decrypt a currently logged in users VPN password via use of an unprotected DLL function. Revised on 2026-05-12 00:00:00
First reported May 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 9.1 An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in FortiSandbox, FortiSandbox Cloud and FortiSandbox PaaS WEB UI may allow an unauthenticated attacker to execute unauthorized commands via specifically crafted HTTP requests. Revised on 2026-06-09 00:00:00
First reported Jun 09, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 4.7 An improper access control vulnerability [CWE-284] in FortiManager may allow an administrator to bypass the approval process for workflow sessions via crafted HTTP or HTTPs requests. Revised on 2026-09-08 00:00:00
First reported Sep 08, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 4.8 An incomplete list of disallowed inputs [CWE-184] in FortiWeb WAF may allow an unauthenticated attacker to bypass policies via specifically crafted requests. Revised on 2026-08-12 00:00:00
First reported Aug 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 6.9 An Improper Restriction of Communication Channel to Intended Endpoints [CWE-923] vulnerability in FortiSIEM Windows Agent may allow an unauthorized attacker on the same local network to execute arbitrary code via spoofing the supervisors hostname when the Windows device is configured with the 'Supers Override' feature. Revised on 2026-07-14 00:00:00
First reported Jul 14, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.0 An improper export of Android application components [CWE-926] in FortiTokenAndroid may allow other applications on the device to read the OTP code via an exported Content Provider URI. Revised on 2026-05-12 00:00:00
First reported May 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.0 An Allocation of Resources Without Limits or Throttling vulnerability [CWE-770] in FortiOS may allow an unauthenticated attacker to perform a slow HTTP DoS attack on the web interface via crafted HTTP requests. Revised on 2026-08-12 00:00:00
First reported Aug 12, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 7.7 An Exposure of Resource to Wrong Sphere vulnerability [CWE-668] in FortiSandbox may allow an unauthenticated attacker to access the VNC server of VMs performing scanning via network requests. Revised on 2026-07-14 00:00:00
First reported Jul 14, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
CVSSv3 Score: 5.3 An Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability [CWE-80] in FortiSIEM may allow a privileged administrator to execute unauthorized commands via crafted requests. Revised on 2026-07-14 00:00:00
First reported Jul 14, 2026 07:00 UTCCatalog metadata updated Oct 08, 2026 03:45 UTCOpen evidence record
A filename, label, or report mention alone does not establish maliciousness. Observation dates describe cited sources; collection dates describe this local metadata catalog. No malware samples are stored, fetched, or executed by these pages.