{"id":"CVE-2025-61624","url":"https://compromised.live/t/CVE-2025-61624","kind":"exploited_vuln","tier":2,"severity":"high","title":"Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability","summary":"An attacker with admin-level login can use specific command-line commands to write or delete arbitrary files on the device, and this flaw is being actively exploited. Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. Apply the vendor's fixes and mitigations now, and check for signs of compromise.","summary_source":"ai","affected":[],"epss":null,"kev":{"date_added":"2026-10-16","due_date":"2026-10-19","ransomware":false},"first_seen":"2026-11-03T21:55:44.095Z","updated_at":"2026-11-03T21:55:44.095Z","status":"active","details":"FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.","aliases":["CVE-2025-61624"],"sources":[{"name":"kev","id":"CVE-2025-61624","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61624"}]}