Live › vulnerability › CVE-2022-41328
Go to dashboardFortinet FortiOS, the operating system on FortiGate firewalls, has a path traversal flaw that lets a privileged local user read and write arbitrary files through crafted CLI commands. CISA reports it is being exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| fortinet fortios | vendor | >= 6.0.0, <= 6.0.16 | – |
| fortinet fortios | vendor | >= 6.2.0, < 6.2.14 | 6.2.14 |
| fortinet fortios | vendor | >= 6.4.0, < 6.4.12 | 6.4.12 |
| fortinet fortios | vendor | >= 7.0.0, < 7.0.10 | 7.0.10 |
| fortinet fortios | vendor | >= 7.2.0, < 7.2.4 | 7.2.4 |
| Fortinet FortiOS | vendor | – | – |
Unknown from the sources.
Apply the updates per the vendor instructions (Fortinet advisory FG-IR-22-398); the affected and fixed versions are not stated in the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands.
This page as .md · .json · in your agent: get_signal("CVE-2022-41328")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.