CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Fortinet FortiOS/FortiProxy Path Traversal Vulnerability Advisory (CVE-2025-61624)
[Affected Scope] Major Fortinet solutions including FortiOS (6.4-7.6), FortiPAM (1.0-1.7), FortiProxy (7.0-7.6), and FortiSwitchManager (7.0-7.2).
[Impact] Authenticated attackers with administrative privileges can write or delete arbitrary system files via specific CLI commands, leading to system compromise or persistence.
[Mitigation] Immediately upgrade to the latest patched firmware versions and strictly enforce IP-based access control for administrative CLI access.
Fortinet FortiOS Sensitive Information Exposure and Symbolic Link Patch Bypass (CVE-2025-68686)
[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4
[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information
[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)
Fortinet FortiOS and FortiSwitchManager Heap Buffer Overflow RCE (CVE-2025-25249)
[Affected Scope] FortiOS versions 6.4 through 7.6 and FortiSwitchManager versions 7.0 through 7.2.
[Impact] Unauthenticated remote attackers can execute arbitrary code or commands with system privileges by sending crafted packets, leading to full system compromise.
[Mitigation] Immediately apply the latest firmware updates provided by Fortinet and restrict exposure of management interfaces and VPN services to the public internet.