mickmick.net

2026年10月20日星期二

Fortinet 產品權限提升漏洞

Fortinet 產品權限提升漏洞

發佈日期: 2026年10月20日

於 Fortinet 產品發現一個漏洞。遠端攻擊者可利用這個漏洞，於目標系統觸發權限提升、繞過保安限制及資料篡改。

注意：

CVE-2025-61624 正在被廣泛利用。FortiOS、FortiPAM、FortiProxy 及 FortiSwitchManager 的命令列解釋器中，若對路徑名稱限制至受限目錄的處理不當（「路徑遍歷」），可能會使具備特權的攻擊者透過針對現有命令特製的參數，實現對檔案的任意寫入或刪除。因此，該漏洞的風險等級被評為中度風險。

影響

繞過保安限制
篡改
權限提升

受影響之系統或技術

FortiOS

FortiOS 6.4 所有版本
FortiOS 7.0 所有版本
FortiOS 7.2 所有版本
FortiOS 7.4.0 至 7.4.9
FortiOS 7.6.0 至 7.6.4

FortiPAM

FortiPAM 1.0 所有版本
FortiPAM 1.1 所有版本
FortiPAM 1.2 所有版本
FortiPAM 1.3 所有版本
FortiPAM 1.4 所有版本
FortiPAM 1.5 所有版本
FortiPAM 1.6 所有版本
FortiPAM 1.7.0

FortiProxy

FortiProxy 7.0 所有版本
FortiProxy 7.2 所有版本
FortiProxy 7.4.0 至 7.4.11
FortiProxy 7.6.0 至 7.6.4

FortiSwitchManager

FortiSwitchManager 7.0.0 至 7.0.6
FortiSwitchManager 7.2.0 至 7.2.7

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

https://fortiguard.fortinet.com/psirt/FG-IR-26-122

漏洞識別碼

CVE-2025-61624

資料來源

相關連結

Fortinet Products Elevation of Privilege Vulnerability

Fortinet Products Elevation of Privilege Vulnerability

Release Date: 20 Oct 2026

A vulnerability was identified in Fortinet Products. A remote attacker could exploit this vulnerability to trigger elevation of privilege, security restriction bypass and data manipulation on the targeted system.

Note:

CVE-2025-61624 is being exploited in the wild. An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the command line interpreter of FortiOS, FortiPAM, FortiProxy and FortiSwitchManager may allow a privileged attacker to achieve arbitrary write or delete files via specifically crafted arguments to existing commands. Hence, the risk level is rated as Medium Risk.

Impact

Security Restriction Bypass
Data Manipulation
Elevation of Privilege

System / Technologies affected

FortiOS

FortiOS 6.4 all versions
FortiOS 7.0 all versions
FortiOS 7.2 all versions
FortiOS 7.4.0 through 7.4.9
FortiOS 7.6.0 through 7.6.4

FortiPAM

FortiPAM 1.0 all versions
FortiPAM 1.1 all versions
FortiPAM 1.2 all versions
FortiPAM 1.3 all versions
FortiPAM 1.4 all versions
FortiPAM 1.5 all versions
FortiPAM 1.6 all versions
FortiPAM 1.7.0

FortiProxy

FortiProxy 7.0 all versions
FortiProxy 7.2 all versions
FortiProxy 7.4.0 through 7.4.11
FortiProxy 7.6.0 through 7.6.4

FortiSwitchManager

FortiSwitchManager 7.0.0 through 7.0.6
FortiSwitchManager 7.2.0 through 7.2.7

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

https://fortiguard.fortinet.com/psirt/FG-IR-26-122

Vulnerability Identifier

CVE-2025-61624

Source

Related Link

BeyondTrust Remote Support 繞過保安限制漏洞

BeyondTrust Remote Support 繞過保安限制漏洞

發佈日期: 2026年10月20日

於 BeyondTrust Remote Support 發現一個漏洞。遠端攻擊者可利用此漏洞，於目標系統觸發繞過保安限制、資料篡改及彷冒。

注意：

CVE-2026-102764 已被廣泛利用。此漏洞存在於 BeyondTrust Remote Support 產品的內部元件中。這些元件未能充分驗證所接收訊息的來源。在特定條件下，這可能使攻擊者得以對該設備執行檔案操作。因此，風險等級被評為高度風險。

影響

篡改
繞過保安限制
仿冒

受影響之系統或技術

Remote Support 26.2.3 或之前的版本

解決方案

在安裝軟體之前，請先瀏覽供應商之網站，以獲得更多詳細資料。

安裝供應商提供的修補程式：

https://www.beyondtrust.com/trust-center/security-advisories/bt26-05

漏洞識別碼

CVE-2026-102764

資料來源

BeyondTrust

相關連結

BeyondTrust Remote Support Security Restriction Bypass Vulnerability

BeyondTrust Remote Support Security Restriction Bypass Vulnerability

Release Date: 20 Oct 2026

A vulnerability has been identified in BeyondTrust Remote Support. A remote attacker could exploit this vulnerability to trigger security restriction bypass, data manipulation and spoofing on the targeted system.

Note:

CVE-2026-102764 is being exploited in the wild. The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance. Hence, the risk level is rated as High Risk.

Impact