NewsFortinet PSIRT2026-04-14 07:00 UTC

Path Traversal in CLI

CVSSv3 Score: 5.4 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] in the command line interpreter of FortiOS, FortiPAM, FortiProxy and FortiSwitchManager may allow a privileged attacker to achieve arbitrary write or delete files via specifically crafted arguments to existing commands. Revised on 2026-04-14 00:00:00

Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-122

ID