Fortinet · FortiOS / FortiPAM / FortiProxy / FortiSwitchManager
Updated October 22, 2026
A path traversal issue lets an authenticated admin with read‑write rights write or delete arbitrary files via specific CLI commands. This can be leveraged to replace binaries or inject malicious code.
Compromise of core system files can lead to full control of the security appliance, disabling defenses and enabling ransomware spread across the network.
Update all affected Fortinet firmware to the latest release; audit admin accounts for least‑privilege access and monitor CLI command logs for anomalous file operations.
More active vulnerabilities