PerimeterClock

Patch-to-exploitation timelines for edge appliances (Fortinet, SonicWall, Ivanti), with detection rules.

CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability

Vendor: Fortinet
Product: Multiple Products
EPSS: 0.013 (71.3th percentile, 2026-10-30)

Summary

FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 2026-10-16.

Reviewed by PerimeterClock.

Timeline

Date Event Source
2026-10-16 Added to CISA KEV (confirmed exploitation) CISA KEV

References

Affected and fixed versions: see the vendor advisory or NVD entry below.