Skip to main content
Apexward Pulse
3 reportsPriority High

The Fortinet Path Traversal Vulnerability

A path traversal vulnerability in Fortinet products has been added to the CISA Known Exploited Vulnerabilities catalogue, indicating active exploitation. UK organisations using affected products should assess their risk.

First report Latest

What is going on

  • A path traversal vulnerability in Fortinet products was added to the CISA Known Exploited Vulnerabilities catalogue in October 2026.
  • CISA reported evidence of active exploitation of the vulnerability in the wild.
  • The vulnerability is associated with two CVE identifiers, CVE-2025-61624 and CVE-2026-102764.
  • What to watch: Further details about the exploitation methods or affected Fortinet product versions could provide more clarity on the risk to UK organisations.

Reports in this story

Newest first. Each one is a separate event with its own sources and evidence.

Back to the feed