CVE-2019-6693Used in ransomware
Fortinet FortiOS
Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
What it is
Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Fortinet entries on the list
- Multiple Products Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · Oct 16, 2026
- FortiMail Fortinet FortiMail Path Traversal Vulnerability CVE-2026-104286 · Oct 1, 2026
- Multiple Products Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability CVE-2025-25249 · Sep 9, 2026
- FortiOS Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability CVE-2025-68686 · Jul 27, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-39808 · Jul 16, 2026
- FortiSandbox Fortinet FortiSandbox OS Command Injection Vulnerability CVE-2026-25089 · Jul 16, 2026