WATCHExploited vulnerability
Fortinet Multiple Products
Fortinet Multiple Products Path Traversal Vulnerability
What's happening and what to do
An attacker with admin-level login can use specific command-line commands to write or delete arbitrary files on the device, and this flaw is being actively exploited. Fortinet FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. Apply the vendor's fixes and mitigations now, and check for signs of compromise.
AI summary of the sources on this page. Regenerated when a source changes.
Signals over time
- 2026-10-16Added to CISA's Known Exploited Vulnerabilities catalog.
- 2026-10-19Federal patch deadline for US agencies.
- 2026-11-03 21:55First seen here.
Source text
FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.