Is the Fortinet Legacy VDOM SKUs end of life?

Yes. The Fortinet Fortinet Legacy VDOM SKUs has reached end of life. Vendor support ended on 2023-05-22.

When is the Fortinet Legacy VDOM SKUs end of sale date?

The Fortinet Fortinet Legacy VDOM SKUs reached end of sale on 2018-05-22. The last date of vendor support is 2023-05-22.

When does Fortinet support end for the Fortinet Legacy VDOM SKUs?

Fortinet support for the Fortinet Legacy VDOM SKUs ended on 2023-05-22.

Home/Fortinet/FortiGate/Fortinet Legacy VDOM SKUs

Fortinet Legacy VDOM SKUs

SKU Legacy-VDOM-SKUs

Fortinet Chassis · FortiGate Series

High confidence Official Fortinet notice ↗ Verified 2026-07-26

Fortinet Legacy VDOM SKUs is dead. Fortinet support ended 2023-05-22 (-1163d). Last available for order 2018-05-22.

Is the Fortinet Legacy VDOM SKUs still supported?

No. Fortinet ended support for the Fortinet Legacy VDOM SKUs on 2023-05-22. No further security fixes will be issued. See Fortinet's lifecycle bulletin.

When does the Fortinet Legacy VDOM SKUs reach end of support?

Fortinet support for the Fortinet Legacy VDOM SKUs ends on 2023-05-22.

What replaces the Fortinet Legacy VDOM SKUs?

Fortinet has not published a successor model for the Fortinet Legacy VDOM SKUs.

What known-exploited CVEs apply to the Fortinet Legacy VDOM SKUs past end of support?

19 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform the Fortinet Legacy VDOM SKUs runs. These will not be patched on this device because it is past the Fortinet security-support date. See the Known Exploited Vulnerabilities table below for the full list.

Known Exploited Vulnerabilities

This device is past Fortinet's security-support date. 19 CVEs in CISA's Known Exploited Vulnerabilities catalog apply to the platform it runs. Fortinet is not issuing patches for this model. Isolate, compensate, or refresh.

CVE	KEV added	Vulnerability	Flags
`CVE-2025-68686`	2026-07-27	Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2026-24858`	2026-01-27	Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2025-59718`	2025-12-16	Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability Advisory 1 Advisory 2 Advisory 3
`CVE-2019-6693`	2025-06-25	Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2025-24472`	2025-03-18	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2024-55591`	2025-01-14	Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2024-23113`	2024-10-09	Fortinet Multiple Products Format String Vulnerability Advisory 1 Advisory 2
`CVE-2024-21762`	2024-02-09	Fortinet FortiOS Out-of-Bound Write Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2023-27997`	2023-06-13	Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2022-41328`	2023-03-14	Fortinet FortiOS Path Traversal Vulnerability Advisory 1 Advisory 2
`CVE-2022-42475`	2022-12-13	Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2022-40684`	2022-10-11	Fortinet Multiple Products Authentication Bypass Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2018-13374`	2022-09-08	Fortinet FortiOS and FortiADC Improper Access Control Vulnerability Advisory 1 Advisory 2	Ransomware
`CVE-2018-13382`	2022-01-10	Fortinet FortiOS and FortiProxy Improper Authorization Advisory 1	Ransomware
`CVE-2018-13383`	2022-01-10	Fortinet FortiOS and FortiProxy Out-of-bounds Write Advisory 1	Ransomware
`CVE-2021-44168`	2021-12-10	Fortinet FortiOS Arbitrary File Download Advisory 1
`CVE-2019-5591`	2021-11-03	Fortinet FortiOS Default Configuration Vulnerability Advisory 1
`CVE-2020-12812`	2021-11-03	Fortinet FortiOS SSL VPN Improper Authentication Vulnerability Advisory 1	Ransomware
`CVE-2018-13379`	2021-11-03	Fortinet FortiOS SSL VPN Path Traversal Vulnerability Advisory 1	Ransomware

Source: CISA Known Exploited Vulnerabilities catalog. The Ransomware flag reflects CISA's own knownRansomwareCampaignUse field, set when the CVE has been observed in ransomware campaigns per their threat intel. It's not a property of the vulnerability description itself.

Correlation is at the platform level, not per-OS-version. Not exhaustive: KEV only lists actively-exploited CVEs and many relevant unexploited vulnerabilities are not here. Verify against vendor security advisories (PSIRT, JSA, PAN-SA) and NVD before acting. See compensating controls if refresh isn't immediate.

End of Sale 2018-05-22

End of Support 2023-05-22