CVE-2024-23113CISA KEVEPSS p99.1%

CVE-2024-23113Fortinet Multiple Products Format String Vulnerability

Fortinet / Multiple Products

Description

Fortinet FortiOS, FortiPAM, FortiProxy, and FortiWeb contain a format string vulnerability that allows a remote, unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.

Scoring

EPSS61.72% probability of exploitation · percentile 99.1% · 2026-07-30T12:03:05Z

CISA KEV entry

Added to KEV: 2024-10-09

(incoming)1

TypeTargetConfidenceTier
KEVEntryFortinet Multiple Products Format String Vulnerabilitykev-cve-2024-231130%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
Fortinet FortiOS Out-of-Bound Write Vulnerability
CVE
CVE-2025-22256
CVE
Fortinet FortiWeb OS Command Injection Vulnerability
CVE
Fortinet FortiClient EMS SQL Injection Vulnerability
CVE
Fortinet FortiWeb SQL Injection Vulnerability
CVE
Fortinet Multiple Products Authentication Bypass Vulnerability
Sourced from NVD + CISA KEV + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.