Fortinet and Palo Alto Networks report active exploitation of security vulnerabilities

Major cybersecurity vendors Fortinet and Palo Alto Networks have reported vulnerabilities being actively exploited in the wild.

Fortinet is facing exploitation of CVE-2025-61624, a path-traversal vulnerability affecting FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager. According to CISA and ENISA, an authenticated attacker with administrative or read/write privileges can use specific CLI commands to write or delete arbitrary files. Organizations are urged to implement available updates and countermeasures immediately.

Palo Alto Networks has issued an advisory regarding a high-severity code injection vulnerability (CVE-2026-0322) in its PAN-OS operating system. The flaw allows an authenticated attacker with network access to the management interface to execute arbitrary code with root privileges. This affects several versions of the PA-series, VM-series, and Panorama management software. CISA has added this vulnerability to its Known Exploited Vulnerabilities catalog.