Back to the CVE list
CVE-2022-40684 CISA KEV · Actively exploitedLinked to ransomwareSuited to automated attack · CISA

Vulnerability in Fortinet FortiOS, FortiProxy, FortiSwitchManager

CVSS score

9.8

EPSS probability

%100.0

Risk score

19.6

Published

4 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Fortinet FortiOS_ FortiProxy_ and FortiSwitchManager 7.2.0 - Authentication bypass

Exploit referenceSource updated: 16.04.2025 00:00:00

FortiOS_ FortiProxy_ FortiSwitchManager v7.2.1 - Authentication Bypass

Exploit referenceSource updated: 27.03.2023 00:00:00

Nuclei: Fortinet - Authentication Bypass

Exploit reference

Anthony1500/CVE-2022-40684

Public PoC

PoC for CVE-2022-40684 - Authentication bypass lead to Full device takeover (Read-only)

Public PoC

Bash PoC for Fortinet Auth Bypass - CVE-2022-40684

Public PoC

A critical authentication bypass vulnerability in Fortinet products (FortiOS, FortiProxy, and FortiSwitchManager)

Public PoC

FortiGate CVE-2022-40684 assessment tool for user enumeration, configuration dump, and lab testing.

Public PoC

XalfiE/Fortigate-Belsen-Leak-Dump-CVE-2022-40684-

Public PoC

Yami0x777/Belsen_Group-et-exploitation-de-la-CVE-2022-40684

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-40684"