The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.4.12Upgrade FortiProxy to 7.6.5Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Apr 14, 2026 |
| Fortinet Fortiswitchmanager | — | Upgrade to the latest version of FortiSwitchManagerUpgrade FortiSwitchManager to 7.0.7Upgrade FortiSwitchManager to 7.2.8 | Sep 30, 2026 | Apr 14, 2026 |
| Fortios | — | Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.4.10Upgrade FortiOS to 7.6.5 | May 6, 2026 | Apr 14, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub