CVE-2025-61624

notes

UNC5820 deploys PeerStitch implant via Fortinet CVE-2025-61624

1. Executive summary A cluster tracked by Palo Alto Networks Unit 42 as CL-STA-0954 (also designated UNC5820) compromised a telecommunications managed service provider in

19 Oct 2026 · 9 min read read →

notes

CVE-2025-61624 Fortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability

1. Executive summary CVE-2025-61624 is a path traversal flaw (CWE-22) in FortiOS, FortiPAM, FortiProxy and FortiSwitchManager that lets an authenticated attacker holding an

16 Oct 2026 · 6 min read read →

notes

PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

1. Executive summary A suspected advanced threat actor has been observed exploiting CVE-2025-61624, a path traversal flaw in the FortiOS command line interpreter, to

16 Oct 2026 · 6 min read read →