CVE-2025-61624: fortinet fortios, fortinet fortipam, fortinet fortiproxy

CVSS 6.5 (medium) · listed as exploited by CISA since 2026-10-16 · published 2026-04-14

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Affected products (NVD): fortinet fortios, fortinet fortipam, fortinet fortiproxy, fortinet fortiswitchmanager, siemens ruggedcom_ape1808_firmware

Fixed in (NVD): 7.4.10, 7.6.5, 1.7.1, 7.4.12, 7.0.7, 7.2.8

Weakness: CWE-22

Source: NVD CVE-2025-61624

References

• https://fortiguard.fortinet.com/psirt/FG-IR-26-122
• https://cert-portal.siemens.com/productcert/html/ssa-975644.html
• https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.