Fortinet · CISA KEV · Active Exploitation · FortiOS · Malware
CVE-2025-61624: PEERSTITCH Malware Abuses a FortiOS Path Traversal Flaw
Fortinet fixed CVE-2025-61624 in April and rated it Medium. In October, CISA added it to KEV after Unit 42 showed it helping deploy PEERSTITCH, a memory-only implant on FortiGate firewalls. Here are the fixed versions and what to hunt for.