CVE-2025-61624Fortinet Multiple Products Path Traversal Vulnerability

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

6.5 MEDIUMEPSS 1.34%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Last updated: 2026-10-17 04:16 UTC

OverviewCVSS details

6.5MEDIUMCVSS 3.1

Score source: NVD
NVD status: Analyzed
Published: Apr 14, 2026
Assigner: fortinet

Affected

FortiOS (Fortinet)

Versions: 7.6.0 through 7.6.4 · 7.4.0 through 7.4.9

+3 more products →

Exploitation

Public exploit: None listed
CISA KEV: Listed · Oct 16, 2026
KEV due date: Oct 19, 2026
Ransomware use: Unknown
SSVC: Exploitation active · Automatable no · Impact total

EPSS · FIRST, scored Nov 7

1.34%chance of exploitation in 30 days

Higher than 71.52% of CVEs

CVSS 3.1 · NVD

6.5Medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack vector: Network
Attack complexity: Low
Privileges required: High
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: High
Availability impact: High

CVSS 3.1 · fortinet (CNA)

6.0Medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Attack vector: Local
Attack complexity: Low
Privileges required: High
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: High
Availability impact: High

CVSS 3.1 · fortinet (CNA)

5.4Medium

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

Attack vector: Local
Attack complexity: Low
Privileges required: High
User interaction: None
Scope: Unchanged
Confidentiality impact: None
Integrity impact: High
Availability impact: High

NVD status: Analyzed

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
6.5	MEDIUM	3.1NVD	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
6.0	MEDIUM	3.1fortinet (CNA)	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
5.4	MEDIUM	3.1fortinet (CNA)	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C

CISA required action

⚡ Known exploited · remediation due Oct 19, 2026

Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Details

CVE ID: CVE-2025-61624
Status: Analyzed
Assigner (CNA): fortinet
Published: Apr 14, 2026
Last modified: 2026-10-17 04:16 UTC
Weaknesses: CWE-22 · Escalation of privilege

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-07 16:31 UTC.