Fortinet sshd path traversal can bypass authentication without login
The CVSS 7.4 issue also covers FortiSASE, FortiProxy and FortiPam; the notice lists no versions or exploitation.
Stories per day · 30 days
3 RSS
Relatedfortinet3fortios3authentication-bypass1cwe-4151denial-of-service1double-free1fortipam1fortiswitch1kev1path-traversal1ssh1
7 stories, newest first · one card per story
Stories tagged #fortiproxy
CISA lists Fortinet path traversal CVE-2025-61624 as exploited
Authenticated admins with read-write rights can write or delete arbitrary files via CLI; the due date is October 19, 2026.
Double free in signal handler
A double-free in FortiOS, FortiProxy, and FortiSwitch lets a local user crash the newcli daemon.
Fortinet security advisory (AV26-898)
Canadian Cyber Centre advisory AV26-898 flags Fortinet vulnerabilities across FortiOS, FortiProxy, FortiPAM, FortiSandbox and FortiMonitorOnSight, urging administrators to apply updates
FortiOS and FortiProxy ZTNA Validation Vulnerability Allows Attacker to Perform a Man-in-the-Middle Attack
Fortinet discloses high-severity certificate validation flaw CVE-2026-84393 in FortiOS and FortiProxy Agentless ZTNA portals enabling unauthenticated man-in-the-middle attacks.
3
ZTNA Portal Improper Certificate Validation
Fortinet fixed an improper certificate validation flaw (CVSS 7.3) in FortiOS and FortiProxy Agentless ZTNA portal enabling unauthenticated man-in-the-middle attacks on backend traffic.
Null Pointer Dereference in Log Report
Fortinet patched a low-severity null pointer dereference (CVSS 2.5) in FortiOS, FortiProxy, and FortiPAM that lets authenticated attackers crash the httpsd daemon.