NewsFortinet PSIRT2026-07-14 07:00 UTC

Path traversal in CLI command allows deletion of root file system

CVSSv3 Score: 5.0 An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability [CWE-22] in FortiOS, FortiPAM, FortiProxy and FortiSwitch Manager may allow a privileged authenticated attacker with physical access to the device to delete the file system via crafted CLI commands. Revised on 2026-07-14 00:00:00

Other advisories

Other news entries

Newscsoonline2026-10-06
New Linux malware turns vulnerable IoT devices into proxy nodes
Newssecurityweek2026-10-02
Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action
Newsncsc-nl2026-10-02
NCSC-2026-0398 [1.00] [M/H] Kwetsbaarheid verholpen in Fortinet FortiMail
Newsfortinet-psirt2026-10-01
Improper limitation of a pathname to a restricted directory
Newssecurityweek2026-09-30
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
Newsbleepingcomputer2026-09-25
ShinyHunters hacked Clop leak site using Grav CMS path traversal flaw
Newssecurityweek2026-09-24
Critical WordPress Vulnerability Exploited Immediately After Disclosure
Newsncsc-nl2026-09-23
NCSC-2026-0387 [1.00] [M/H] Kwetsbaarheid verholpen in Check Point Security Management en Log Servers

Source: https://fortiguard.fortinet.com/psirt/FG-IR-26-151

More on traversal