CVE-2025-61624

Reported Context (2)

The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a privileged PEERSTITCH Malware Uses FortiOS Flaw to Alter Tagged VPN Sessions
The attackers exploited another vulnerability, CVE-2025-61624, via FortiOS auto-script path traversal. FortiManager Intrusion Exposes 500+ Firewalls and Deploys PEERSTITCH Implant

CVE (3)

Malware (1)

People (2)

Threat Actors (2)

MITRE ATT&CK (15)

Vendors (2)

Products (13)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.