VulnRadar

Data against noise.

Built with NaN
Page generated: 08 Nov 2026, 09:34 UTC
← Dashboard

CVE-2018-13379

An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacke…

Read full description
An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to 1.1.6, 1.0.0 to 1.0.7 under SSL VPN web portal allows an unauthenticated attacker to download system files via special crafted HTTP resource requests.
CVSS 9.1 (CRITICAL) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.9/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 9.1: +1.36
  • Fresh EPSS: 100.00%: +0.50

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 16 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

Cybersecurity Dive
Press · 24 Apr 2025, 07:00 · Threat groups exploit resurgent vulnerabilities - Cybersecurity Dive
CCB Belgium
Press · 23 Mar 2025, 03:17 · Warning : Critical vulnerability CVE-2018-13379 Fortinet FortiOS SSL VPN - CCB Belgium
thestack.technology
Press · 31 Mar 2022, 07:00 · "Misconfigured" VPN used to breach Viasat satellite network, malicious commands wiped modems - thestack.technology
Bitsight
Press · 14 Sep 2021, 07:00 · Fortinet Cyber Leak Demonstrates Need For Remote Access System Patching - Bitsight
Malwarebytes
Press · 09 Sep 2021, 07:00 · 500,000 Fortinet VPN credentials exposed: Turn off, patch, reset passwords - Malwarebytes
See all 16 source documents
The Hacker News
Press · 09 Sep 2021, 07:00 · Hackers Leak VPN Account Passwords From 87,000 Fortinet FortiGate Devices - The Hacker News
The Hacker News
Press · 29 Jul 2021, 07:00 · Top 30 Critical Security Vulnerabilities Most Exploited by Hackers - The Hacker News
Qualys
Press · 28 Jul 2021, 07:00 · CISA Alert: Top Routinely Exploited Vulnerabilities - Qualys
Cisco Talos Blog
Press · 15 Apr 2021, 07:00 · Threat Advisory: NSA SVR Advisory Coverage - Cisco Talos Blog
The Hacker News
Press · 08 Apr 2021, 07:00 · Hackers Exploit Unpatched VPNs to Install Ransomware on Industrial Targets - The Hacker News
BleepingComputer
Press · 02 Apr 2021, 07:00 · FBI and CISA warn of state hackers attacking Fortinet FortiOS servers - BleepingComputer
cyfirma
Press · 28 Dec 2020, 08:00 · Incidents, attributions, and exploitation techniques for path traversal flaw in Fortinet FortiOS SSL VPN devices - cyfirma
Industrial Cyber
Press · 02 Dec 2020, 08:00 · Vulnerability in Fortinet’s legacy Fortigate VPN systems exposes close to 50,000 credentials - Industrial Cyber
BleepingComputer
Press · 25 Nov 2020, 08:00 · Passwords exposed for almost 50,000 vulnerable Fortinet VPNs - BleepingComputer
BleepingComputer
Press · 22 Nov 2020, 08:00 · Hacker posts exploits for over 49,000 vulnerable Fortinet VPNs - BleepingComputer
National Cyber Security Centre
Press · 02 Oct 2019, 07:00 · Vulnerabilities exploited in VPN products used worldwide - National Cyber Security Centre

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.9 (2026-11-02 15:12). The curve appears once the score changes.

Public exploit evidence

2

Public exploit entries / repo candidates

See 2 repos with metrics
RepositoryStarsForksLanguageUpdated
Zierax/CVE-2018-1337921Python15 Feb 2026, 04:42
Instructor-Admin/Multi-threaded-mass-exploiter-CVE-2018-13379-POC10Python23 May 2026, 14:03
Public exploit evidence
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 9.1; EPSS 100.0%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
network access, no prior privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:57:56.535692+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Published
04 Jun 2019, 20:18
First press mention
02 Oct 2019, 07:00
Added to the CISA KEV catalog
03 Nov 2021, 00:00
Latest press mention
24 Apr 2025, 07:00
Score calculated
05 Nov 2026, 13:57
PoCs on GitHub
2 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar