CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2025-616246.5/MEDIUMEPSS 1.3%CISA KEV
2026-04-14

Fortinet FortiOS/FortiProxy Path Traversal Vulnerability Advisory (CVE-2025-61624)

[Affected Scope] Major Fortinet solutions including FortiOS (6.4-7.6), FortiPAM (1.0-1.7), FortiProxy (7.0-7.6), and FortiSwitchManager (7.0-7.2).

[Impact] Authenticated attackers with administrative privileges can write or delete arbitrary system files via specific CLI commands, leading to system compromise or persistence.

[Mitigation] Immediately upgrade to the latest patched firmware versions and strictly enforce IP-based access control for administrative CLI access.

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse