CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability
Summary
Fortinet products including FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager are affected by a path traversal vulnerability. This flaw allows an authenticated administrator to write or delete arbitrary files through specific CLI commands. CISA has mandated the application of mitigations by October 19, 2026, urging adherence to its risk-based patching guidance.
IFF Assessment
The vulnerability allows an attacker to write or delete arbitrary files, posing a significant risk to system integrity and data confidentiality.
Severity
CISA KEV: Listed as actively exploited. Federal patch due: October 19, 2026. Known ransomware use: Unknown.
Defender Context
This vulnerability in widely used Fortinet products requires immediate attention for organizations using affected devices. Defenders should prioritize applying vendor-provided mitigations and follow CISA's guidance on risk-based patching. The potential for arbitrary file manipulation means attackers could disrupt operations or plant malicious code.