PULSEUnderground Intel

LIVE63signals / 24h

FEED

ransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilitiesransomaurora reclama a Adams Warehouse & Delivery, Inc. · US · Transportationransomthegentlemen reclama a Suhai Segurana Pessoal · BR · Professional Servicesransomthegentlemen reclama a SBI Audiovisual Medinbox · ES · Healthcareransomthegentlemen reclama a Saga University · JP · Educationransomthegentlemen reclama a Netcore Unbxd · IN · Technologyransomthegentlemen reclama a REGiO Nord · DE · Otherransomthegentlemen reclama a Museum Siam · TH · Hospitalityransomthegentlemen reclama a Skin Center · US · Healthcareransomthegentlemen reclama a Thai Ha PCL KASET · TH · Agriculture and Food Productionransomthegentlemen reclama a Inovar Packaging Group · AU · Manufacturingransomthegentlemen reclama a Engineers Ireland · IE · Professional Servicesransomthegentlemen reclama a North Bridge Venture Partners · US · Financial Servicesransomthegentlemen reclama a SONGWOOI · KR · Not Foundransomthegentlemen reclama a Petroleum Telcom Communications · PK · Energy & Utilities

CVE Watch—

CVE-2022-41328

Fortinet FortiOS Path Traversal Vulnerability

CVSS

—

No CVSS

EPSS

10.7%

p96

KEV

YES

Mar 14, 2023

Exploit Today

79

0-100

Published: — · Last modified: —

EPSS · 30d

10.7%EPSS · 30 days10.7%

2026-09-172026-10-15

KEV catalog record

Product

Fortinet / FortiOS

Vulnerability

Fortinet FortiOS Path Traversal Vulnerability

Added to KEV

Mar 14, 2023

Remediate by

Apr 4, 2023

Known ransomware use

No

Summary description

Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands.

Required action

Apply updates per vendor instructions.

Notes

https://www.fortiguard.com/psirt/FG-IR-22-369; https://nvd.nist.gov/vuln/detail/CVE-2022-41328

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-686865.9 MED

KEV—79Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability80d CVE-2024-217629.8 CRI

KEV—80Fortinet FortiOS Out-of-Bound Write Vulnerability73d CVE-2019-55916.5 MED

KEV—79Fortinet FortiOS Default Configuration Vulnerability62d CVE-2020-128129.8 CRI

KEV—80Fortinet FortiOS SSL VPN Improper Authentication Vulnerability14d CVE-2019-66936.5 MED

KEV—78Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability73d CVE-2018-13379—

KEV—80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—