CVE-2019-5591Used in ransomware
Fortinet FortiOS
Fortinet FortiOS Default Configuration Vulnerability
What it is
Fortinet FortiOS contains a default configuration vulnerability that may allow an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the Lightweight Directory Access Protocol (LDAP) server.
What to do
Apply updates per vendor instructions.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Fortinet entries on the list
- Multiple Products Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · Oct 16, 2026
- FortiMail Fortinet FortiMail Path Traversal Vulnerability CVE-2026-104286 · Oct 1, 2026
- Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2025-25249 · Sep 9, 2026
- FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2025-68686 · Jul 27, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 · Jul 16, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-25089 · Jul 16, 2026