Fortinet FortiOS — Security Intelligence & Vulnerability Profile

Doctrinal Security Principle

The absence of known CVEs does not guarantee absolute security of a software component. This dossier catalogs verified vulnerabilities, CISA KEV entries, and vendor advisories vetted by Hermes Codex.

---

1. Software Identity & Security Posture

Parameter	Technical Specification
Official Name	Fortinet FortiOS
Vendor / Project	fortinet
Canonical ID	fortinet:fortios
Versioning Scheme	semver
CPE Identifiers	cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* cpe:2.3:h:fortinet:fortigate:*:*:*:*:*:*:*:*
Overall Posture	CRITICAL
Recommended Safe Release	7.6.7

Documented CVEs

14 vulnerabilities cataloged in the Hermes intelligence repository.

CISA KEV Entries

9 flaws with confirmed active in-the-wild exploitation.

Weaponized Exploits

13 vulnerabilities with publicly available PoCs or weaponized exploit tooling.

Remediation Target

Recommended upgrade to 7.6.7 to neutralize known flaws.

---

2. 30-Day Risk Trajectory & Trend Evolution

Progression of Hermes Threat Score (HTS) posture and maximum EPSS probability over the last 30 days:

Current HTS Score

0 / 100

= Stable over 30d

Max EPSS (Exploitation)

97.6 %

= Stable over 30d

CISA KEV Activity

9

Active in-the-wild exploitation

HTS Trend Curve (D-30 → Today)2026-08-12 → 2026-09-10

---

3. Vulnerability History & Version Applicability Matrix

CVE	CVSS Score	EPSS Probability	CISA KEV	Affected Versions	Fixed In	Hermes Analysis
CVE-2025-25249	9.8 (CRITICAL)	2.4%	CISA KEV	v6.4.0 to v6.4.16, v7.0.0 to v7.0.17, v7.2.0 to v7.2.11, v7.4.0 to v7.4.8, v7.6.0 to v7.6.3	6.4.17, 7.0.18, 7.2.12, 7.4.9, 7.6.4	Analysis →
CVE-2024-23113	9.8 (CRITICAL)	94.1%	CISA KEV	v7.4.0 to v7.4.2, v7.2.0 to v7.2.6, v7.0.0 to v7.0.13	7.4.3, 7.2.7, 7.0.14	-
CVE-2024-21762	9.8 (CRITICAL)	97.5%	CISA KEV	v7.4.0 to v7.4.2, v7.2.0 to v7.2.6, v7.0.0 to v7.0.13, v6.4.0 to v6.4.14, v6.2.0 to v6.2.15	7.4.3, 7.2.7, 7.0.14, 6.4.15, 6.2.16	Analysis →
CVE-2023-27997	9.8 (CRITICAL)	97.6%	CISA KEV	v7.2.0 to v7.2.4, v7.0.0 to v7.0.11, v6.4.0 to v6.4.12, v6.2.0 to v6.2.13, v6.0.0 to v6.0.16	7.2.5, 7.0.12, 6.4.13, 6.2.14, 6.0.17	Analysis →
CVE-2022-42475	9.8 (CRITICAL)	97.3%	CISA KEV	v7.2.0 to v7.2.2, v7.0.0 to v7.0.8, v6.4.0 to v6.4.10, v6.2.0 to v6.2.11	7.2.3, 7.0.9, 6.4.11, 6.2.12	Analysis →
CVE-2018-13379	9.8 (CRITICAL)	97.6%	CISA KEV	v6.0.0 to v6.0.4, v5.6.3 to v5.6.7, v5.4.6 to v5.4.12	6.0.5, 5.6.8, 5.4.13	-
CVE-2022-40684	9.6 (CRITICAL)	97.5%	CISA KEV	v7.2.0 to v7.2.1, v7.0.0 to v7.0.6	7.2.2, 7.0.7	-
CVE-2026-24858	9.4 (CRITICAL)	86.1%	CISA KEV	v7.2.0 to v7.2.8, v7.4.0 to v7.4.4	7.2.9, 7.4.5, 7.6.0	Analysis →
CVE-2025-53844	8.8 (HIGH)	0.6%	No	v7.2.0 to v7.2.11, v7.4.0 to v7.4.8, v7.6.0 to v7.6.3	7.2.12, 7.4.9, 7.6.4	Analysis →
CVE-2026-22153	8.1 (HIGH)	0.7%	No	v7.6.0 to v7.6.4	7.6.5	Analysis →
CVE-2025-24472	8.1 (HIGH)	7.2%	CISA KEV	v7.0.0 to v7.0.16	7.0.17, 7.2.0, 7.4.0	Analysis →
CVE-2026-59837	6.6 (MEDIUM)	0.7%	No	v7.2.0 to v7.2.6, v7.4.0 to v7.4.1	7.2.7, 7.4.2	Analysis →
CVE-2026-59839	5.5 (MEDIUM)	0.3%	No	v6.4.0 to v6.4.16, v7.0.0 to v7.0.17, v7.2.0 to v7.2.11, v7.4.0 to v7.4.9, v7.6.0 to v7.6.6	6.4.17, 7.0.18, 7.2.12, 7.4.10, 7.6.7	Analysis →
CVE-2026-59840	5.3 (MEDIUM)	0.3%	No	v7.2.0 to v7.2.11, v7.4.0 to v7.4.8, v7.6.0 to v7.6.2	7.2.12, 7.4.9, 7.6.3	Analysis →

---

4. Ransomware & Threat Actor Exposure

Vulnerabilities impacting Fortinet FortiOS are actively leveraged in real-world intrusion campaigns:

• CVE-2025-25249: PivotC2 Post-Exploitation RAT (Read deep dive analysis)
• CVE-2024-23113: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CVE-2024-21762: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-21762 (Read deep dive analysis)
• CVE-2023-27997: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (Read deep dive analysis)
• CVE-2022-42475: https://www.cisa.gov/known-exploited-vulnerabilities-catalog (Read deep dive analysis)
• CVE-2018-13379: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CVE-2022-40684: https://www.cisa.gov/known-exploited-vulnerabilities-catalog
• CVE-2026-24858: Initial Access Broker Exploitation & Ransomware (Read deep dive analysis)
• CVE-2025-24472: https://fortiguard.fortinet.com/psirt/FG-IR-24-535 ; https://nvd.nist.gov/vuln/detail/CVE-2025-24472 (Read deep dive analysis)

---

5. Evaluate Running Versions in Interactive Workbench

Are you operating Fortinet FortiOS in your infrastructure? Inspect your running build to evaluate applicability, confidence score, and security deltas:

Launch Software Intelligence Workbench for Fortinet FortiOS Run deterministic in-browser evaluation, calculate HTS threat reduction, and plan your upgrade path.