Reference page — cumulative record through Monday, October 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2025-61624

CVE-2025-61624MEDIUM

Fortinet FortiOS — An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 throug…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  N  H  H    6.5   .0108   64.6   YES

AFFECTED
  Product             Versions  Fixed
  FortiOS             7.6.0 –   —
  FortiProxy          7.6.0 –   —
  FortiSwitchManager  7.2.0 –   —
  FortiPAM            1.7.0 –   —

TIMELINE
  Sep 29  Reserved by fortinet
  Apr 14  Published (CNA: fortinet)
  Oct 16  ADDED TO KEV — CVE-2025-61624 (Fortinet FortiOS). Remediation due October 19, 2026.
  Oct 17  RESCORED — CVE-2025-61624 (Fortinet FortiOS). CVSS 5.4 → 6.5 (NVD).

CWE-22 · CNA: fortinet · CVSS v3.1 · 4 references · NVD status: Analyzed · KEV due October 19, 2026

Description

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Lifecycle

Complete event history — 4 events, chronological
Date	Event	Detail
September 29, 2025	Reserved	Reserved by fortinet
April 14, 2026	Published	Published (CNA: fortinet)
October 16, 2026	KEV ADDED	ADDED TO KEV — CVE-2025-61624 (Fortinet FortiOS). Remediation due October 19, 2026.
October 17, 2026	RESCORED	RESCORED — CVE-2025-61624 (Fortinet FortiOS). CVSS 5.4 → 6.5 (NVD).

Affected

Affected products and packages — 4 rows
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
Fortinet	FortiOS	—	7.6.0	—
Fortinet	FortiProxy	—	7.6.0	—
Fortinet	FortiSwitchManager	—	7.2.0	—
Fortinet	FortiPAM	—	1.7.0	—

Weaknesses

CWE-22

References (4)

https://cert-portal.siemens.com/productcert/html/ssa-975644.html [Third Party Advisory]
https://fortiguard.fortinet.com/psirt/FG-IR-26-122 [Vendor Advisory]
https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 [Third Party Advisory]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 [US Government Resource]

Authoritative record: CVE-2025-61624 at cve.org

Vendors: fortinet

Weaknesses: CWE-22

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-61624 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Monday, October 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.