CVSS 6.5 (MEDIUM) · Actively exploited (listed in CISA KEV)
Fortinet products including FortiOS, FortiPAM, and FortiProxy contain a path traversal vulnerability. Authenticated attackers with admin privileges can write or delete arbitrary files via CLI commands.
This flaw allows high-impact file manipulation, potentially leading to system compromise or data loss. It is currently known to be exploited in the wild.
Apply vendor patches immediately and follow CISA BOD 26-04 guidance. Evaluate internet exposure and discontinue use if mitigations are unavailable.
Fortinet 產品存在路徑遍歷漏洞，受影響產品包括 FortiOS、FortiPAM 及 FortiProxy。擁有管理員權限的攻擊者可透過 CLI 指令寫入或刪除任意檔案。
請立即套用廠商修補程式並遵循 CISA BOD 26-04 指引。若無法緩解，請評估網路暴露風險並考慮停用該產品。