Known Exploited Vulnerabilities October 16, 2026 · CISA KEV Catalog

CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability

FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-61624 Fortinet
Related: CVE-2026-104286: Fortinet Forti Mail Path Traversal Vulnerability Known Exploited Vulnerabilities · Oct 01, 2026
CVE-2025-25249: Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability Known Exploited Vulnerabilities · Sep 09, 2026
CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability Known Exploited Vulnerabilities · Jul 27, 2026