CISA 2026-10-16

CISA KEV — Fortinet Multiple Products (CVE-2025-61624) +1 more

Machine-generated analysis · WAYSCloud LLM

Fortinet multiple products and BeyondTrust Remote Support have been added to CISA’s KEV catalog, indicating active exploitation.

Context

CVE-2025-61624 is a path-traversal vulnerability affecting multiple Fortinet products. CVE-2026-102764 is an authentication-bypass vulnerability in BeyondTrust Remote Support that can be exploited via spoofing. CISA notes that agencies should prioritize rapid remediation of KEV items on publicly exposed assets. The advisory encourages broader adoption of risk-based vulnerability management.

Operator considerations

Check: Verify deployment of Fortinet products and BeyondTrust Remote Support for versions vulnerable to CVE-2025-61624 and CVE-2026-102764.
Isolate: Limit external exposure of any vulnerable Fortinet or BeyondTrust services until they are remediated.
Log: Monitor for path-traversal attempts on Fortinet devices and spoofed authentication attempts on BeyondTrust Remote Support.

From Cybersecurity and Infrastructure Security Agency ↗

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.

CVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability

CVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability

These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.

Binding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA’s KEV Catalog on publi...

Read the full advisory on CISA →