Vulnerability details
CVE-2025-61624
Actively exploitedOfficial description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 5.4Medium | 3.1 | CVEProject cvelistV5 (CNA) (fortinet) | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Fortinet | FortiOS | 6.4.0 ≤ v ≤ 6.4.16 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.0.0 ≤ v ≤ 7.0.19 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.2.0 ≤ v ≤ 7.2.13 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.4.0 ≤ v ≤ 7.4.9 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.6.0 ≤ v ≤ 7.6.4 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.2.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.7.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.0.0 ≤ v ≤ 1.0.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.1.0 ≤ v ≤ 1.1.2 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.3.0 ≤ v ≤ 1.3.1 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.4.0 ≤ v ≤ 1.4.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.5.0 ≤ v ≤ 1.5.1 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiPAM | 1.6.0 ≤ v ≤ 1.6.2 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.0.0 ≤ v ≤ 7.0.23 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.2.0 ≤ v ≤ 7.2.16 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.4.0 ≤ v ≤ 7.4.11 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiProxy | 7.6.0 ≤ v ≤ 7.6.4 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSwitchManager | 7.0.0 ≤ v ≤ 7.0.6 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSwitchManager | 7.2.0 ≤ v ≤ 7.2.7 | CVEProject cvelistV5 (CNA) |
| Siemens | RUGGEDCOM APE1808 | All | CVEProject cvelistV5 (CNA) |
References and advisories
4- https://fortiguard.fortinet.com/psirt/FG-IR-26-122
- https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 third-party-advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 government-resource
- https://cert-portal.siemens.com/productcert/html/ssa-975644.html
Details
- Published
- 2026-04-14
- Last updated
- 2026-10-17
- State
- Published
- Assigner (CNA)
- fortinet
- Kolun priority
- 76 · High
CISA KEV catalog
- Date added
- 2026-10-16
- Due date
- 2026-10-19
- Used in ransomware
- Unknown
Exploit prediction (EPSS)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- Active
- Technical impact
- Total
Weaknesses (CWE)
- CWE-22Escalation of privilege