CVE-2025-61624

Vendor

Fortinet

Product

Multiple Products

EPSS

0.013 (p71)

CISA KEV

added 16 Oct 2026, due 19 Oct 2026 (13d overdue)

Weakness

CWE-22

Exposure class

Edge / VPN / firewall, Remote access

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

1. 75
   KEV CISA KEV 16d ago

   Fortinet Multiple Products Path Traversal Vulnerability

   FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via…

   KEV · due 19 Oct 2026 (overdue) Fix available CVE-2025-61624 Fortinet
2. 65
   CISA alert CISA 15d ago

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability CVE-2026-102764…

   Exploited EPSS 0.19 CVE-2025-61624CVE-2026-102764 Fortinet BeyondTrust