onyx

onyx --cves cve-2025-61624

CVE-2025-61624

MEDKEVADV 1Fortinet FortiOS
score
31.7
cvss
6.0
epss
1.1% ▲0.5
published
2026-04-14
kev added
2026-10-16
first seen

Fortinet FortiOS 7.6.0 through 7.6.4, 7.4.0 through 7.4.9, 7.2, 7.0, 6.4, FortiPAM 1.0 through 1.7.0, FortiProxy 7.6.0 through 7.6.4, 7.4.0 through 7.4.11, 7.2, 7.0, and FortiSwitchManager 7.2.0 through 7.2.7, 7.0.0 through 7.0.6 contain a path traversal caused by improper limitation of pathname in CLI commands, letting authenticated attackers with admin profile and read-write permissions write or delete arbitrary files.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-04-14 — PublishedP2026-10-16 — Added to CISA KEVK2026-10-16 — First advisory — CISA: CISA Adds Two Known Exploited Vulnerabilities to CatalogA2026-10-21 — Tracked by OnyxTscore2026-10-21: score 31.731.7epss2026-09-22: epss 0.5%2026-09-23: epss 0.5%2026-09-24: epss 0.5%2026-09-25: epss 0.5%2026-09-26: epss 0.5%2026-09-27: epss 0.5%2026-09-29: epss 0.5%2026-09-30: epss 0.5%2026-10-01: epss 0.5%2026-10-02: epss 0.5%2026-10-03: epss 0.5%2026-10-04: epss 0.5%2026-10-05: epss 0.5%2026-10-06: epss 0.5%2026-10-07: epss 0.5%2026-10-08: epss 0.5%2026-10-09: epss 0.5%2026-10-10: epss 0.5%2026-10-11: epss 0.5%2026-10-12: epss 0.5%2026-10-13: epss 0.5%2026-10-14: epss 0.5%2026-10-15: epss 0.5%2026-10-16: epss 0.6%2026-10-18: epss 1.1%2026-10-19: epss 1.1%2026-10-20: epss 1.1%2026-10-21: epss 1.1%1.1%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. First advisory — CISA CISA Adds Two Known Exploited Vulnerabilities to Catalog
  4. Tracked by Onyx

Advisories

1 feed this week

Weaknesses

CWE-22

References 5