Fortinet · FortiOS, FortiPAM, FortiProxy, FortiSwitchManager
Updated October 17, 2026
A path‑traversal issue in several Fortinet products allows an admin‑level user with read‑write rights to write or delete arbitrary files via crafted CLI commands. While exploitation requires privileged access, the impact is severe because it can subvert the integrity of the security platform.
Compromised administrators could replace configuration files, inject malicious binaries, or disable security controls, opening the network to further compromise.
Update all affected Fortinet firmware to the latest version; audit admin accounts for unnecessary read‑write privileges and enforce least‑privilege principles.
More active vulnerabilities