FortiPAM 1.5 vulnerabilities
5 advisories affect Fortinet FortiPAM 1.5, 1 already exploited by attackers. Latest: October 16, 2026.
Running FortiPAM 1.5 devices? Get an email when a new vulnerability comes out. Free, unsubscribe in one click.
Turn on FortiPAM 1.5 alerts
Turn on FortiPAM 1.5 alerts
| Vulnerability | Severity | Affected versions |
|---|---|---|
| Fortinet Multiple Products Path Traversal Vulnerability CVE-2025-61624 · October 16, 2026 | Medium 6 Exploited | from 1.5.0 to 1.5.1 |
| Fortinet: Null Pointer Dereference in Log Report FG-IR-26-173 · September 8, 2026 | Low 2.5 | all versions 1.5 |
| Fortinet: SSL-VPN Reflected XSS FG-IR-26-150 · July 14, 2026 | Medium 6.1 | all versions 1.5 |
| Fortinet: Stack Buffer Overflow in Log Report FG-IR-26-148 · July 14, 2026 | Medium 5.9 | all versions 1.5 |
| Fortinet: Path traversal in CLI command allows deletion of root file system FG-IR-26-151 · July 14, 2026 | Medium 5.5 | all versions 1.5 |
Affected versions are compiled automatically from vendor advisories and NVD and may contain errors. Where no fixed version is shown, you will find it in the official advisory linked from every page: check it there before updating.
Other FortiPAM versions: 1.8 · 1.7 · 1.6 · 1.4 · 1.3 · 1.2 · 1.1 · 1.0