CVE-2025-61624
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
Key facts
- CVSS score
- 6.0 (v3.1)
- Severity
- MEDIUM
- CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H- Weakness (CWE)
- CWE-22
- EPSS score
- 0.6% (47th percentile)
- In CISA KEV
- Yes, added October 16, 2026
- In EU EUVD
- Yes (EUVD-2025-209452)
- Published
- April 14, 2026
- NVD last modified
- October 17, 2026
- Status
- Analyzed
CISA Known Exploited Vulnerability
Fortinet Multiple Products Path Traversal Vulnerability
Added to the KEV catalog on October 16, 2026; federal remediation due October 19, 2026.
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2025-209452 in the EU Vulnerability Database. ENISA flags it as known exploited. Last updated in EUVD on October 17, 2026.
View on the EU Vulnerability DatabaseAffected products
- fortinet / fortios
- fortinet / fortipam
- fortinet / fortiproxy
- fortinet / fortiswitchmanager
- siemens / ruggedcom ape1808
- siemens / ruggedcom ape1808 firmware
Certified products that may be affected
1 FIPS 140 or Common Criteria certified product, from automated matching by sec-certs.org.
- Fortinet, Inc. FortiOS 7.0.7 - Fortinet, Inc. - Common Criteria NSCIB-CC-0590233-CR - active
References
- https://cert-portal.siemens.com/productcert/html/ssa-975644.html(Third Party Advisory)
- https://fortiguard.fortinet.com/psirt/FG-IR-26-122(Vendor Advisory)
- https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05(Third Party Advisory)
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624(US Government Resource)
Last updated October 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain