LiveBreach Intelligence: data breaches, leaks & ransomware, tracked as they surfaceOngoing protection: GalaxyWarden →
Recent BreachesData breach tracker
NewsletterFree scan

CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability

RBRecent Breaches Vulnerability Intelligence·Oct 16, 2026
CVSS 6.0 · Medium⚠ Actively exploited (CISA KEV)
6.0
CVSS score
Medium
Severity
Active
CISA KEV
No
Ransomware use
Oct 19, 2026
Patch deadline
⚠ Exploited in the wild. CISA added CVE-2025-61624 to its Known Exploited Vulnerabilities catalog on Oct 16, 2026, with a federal patch deadline of Oct 19, 2026 — meaning attackers are actively using it. If you run the affected software, patch it immediately.

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Details

AffectedFortinet · Multiple Products
WeaknessCWE-22
CVSS base score6.0 (Medium)
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
PublishedApr 14, 2026
Added to CISA KEVOct 16, 2026
Federal patch deadlineOct 19, 2026
Known ransomware useNot documented
Check if your data is exposed →

Frequently asked questions

Is CVE-2025-61624 being actively exploited?

Yes — CISA lists CVE-2025-61624 in its Known Exploited Vulnerabilities (KEV) catalog, so it is confirmed exploited in the wild. Patch it as a priority.

What does CVE-2025-61624 affect?

CVE-2025-61624 affects Fortinet · Multiple Products.

How do I fix CVE-2025-61624?

Apply the vendor’s patch for the affected software. The federal patch deadline was Oct 19, 2026. Then check whether your personal data was exposed in any related breach.

References

Official records: NVD · CISA KEV

← All actively-exploited vulnerabilities