CVE-2025-61624 Fortinet FortiOS
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions,…
- CVSS
- 5.4 Medium
- EPSS
- 1.4%
- Percentile
- 73
- Published
- 2026-04-14
- Force
- 7 of 12
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:O/RC:C
On CISA’s exploited list
Fortinet Multiple Products Path Traversal Vulnerability
- Added
- 2026-10-16
- Federal patch deadline
- 2026-10-19
- Ransomware use
- not known