The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5 and Fortinet FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 CLI allows an authenticated admin user with diagnose privileges to delete files on the system.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortianalyzer | — | Upgrade to the latest version of FortiAnalyzerUpgrade FortiAnalyzer to 7.4.3Upgrade FortiAnalyzer to 7.2.6 | Aug 1, 2025 | Feb 11, 2025 |
| Fortinet Fortimanager | — | Upgrade to the latest version of FortiManagerUpgrade FortiManager to 7.4.3Upgrade FortiManager to 7.2.6 | May 25, 2026 | Feb 11, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub