{"metadata": {"vulnerability": "CVE-2025-61624", "count": 85, "kinds": {"milestone": 9, "sighting": 38, "kev": 11, "other": 27}, "linked_omitted": 0}, "data": [{"timestamp": "2025-09-29T07:36:48.603Z", "date_only": false, "value": "2025-09-29T07:36:48.603Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.initial_release_date", "linked_record": true}, {"timestamp": "2026-03-10T00:00:00Z", "date_only": false, "value": "2026-03-10T00:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.initial_release_date", "linked_record": true}, {"timestamp": "2026-03-12T06:00:00Z", "date_only": false, "value": "2026-03-12T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-04-14T00:00:00Z", "date_only": true, "value": "2026-04-14", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "vendor_advisories.0.published_at", "linked_record": true}, {"timestamp": "2026-04-14T04:00:00Z", "date_only": false, "value": "2026-04-14T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "522d885d-dbc5-4606-a3c4-f8d5a0288030", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / fortinet", "record": "CVE-2025-61624", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-04-14T16:16:31Z", "date_only": false, "value": "2026-04-14T16:16:31Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3VF-64GV-CXR8", "record": "GHSA-F3VF-64GV-CXR8", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-04-14T16:16:31.300Z", "date_only": false, "value": "2026-04-14T16:16:31.300", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-61624", "record": "FKIE_CVE-2025-61624", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T18:30:34Z", "date_only": false, "value": "2026-04-14T18:30:34Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3VF-64GV-CXR8", "record": "GHSA-F3VF-64GV-CXR8", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "document.tracking.revision_history.0.date", "linked_record": true}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "document.tracking.initial_release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-14T22:00:00Z", "date_only": false, "value": "2026-04-14T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "vulnerabilities.0.release_date", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "last_revision_date", "linked_record": true}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": true, "value": "2026-04-15", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "initial_release_date", "linked_record": true, "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-04-15T00:00:00Z", "date_only": false, "value": "2026-04-15T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0440", "record": "CERTFR-2026-AVI-0440", "field": "revisions.0.revision_date", "linked_record": true}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.2.date", "metric_role": "disclosure", "metric_basis": "recorded_event", "added_in_revision": true, "linked_record": true}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.revision_history.1.date", "metric_role": "disclosure", "metric_basis": "recorded_event", "added_in_revision": true, "linked_record": true}, {"timestamp": "2026-05-12T00:00:00Z", "date_only": false, "value": "2026-05-12T00:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_siemens \u00b7 SSA-975644", "record": "SSA-975644", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-05-12T12:08:31.410Z", "date_only": false, "value": "2026-05-12T12:08:31.410Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / siemens-SADP", "record": "CVE-2025-61624", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-05-13T15:52:23.117Z", "date_only": false, "value": "2026-05-13T15:52:23.117729Z", "kind": "other", "label": "Document generated", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.revision_history.3.date", "linked_record": true}, {"timestamp": "2026-05-14T06:00:00Z", "date_only": false, "value": "2026-05-14T06:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-26-071-02", "record": "ICSA-26-071-02", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-06-19T12:45:35.452Z", "date_only": false, "value": "2026-06-19T12:45:35.452917Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc9f5a22-991b-450e-a4f2-b67d62e07e1a", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "f0f1eade-9c63-438f-ae41-e931acb4d187", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cc9f5a22-991b-450e-a4f2-b67d62e07e1a", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-61624", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-15T00:00:00Z", "date_only": false, "value": "2026-10-15T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-61624", "record": "FKIE_CVE-2025-61624", "field": "metrics.ssvcV203.0.ssvcData.timestamp", "linked_record": true}, {"timestamp": "2026-10-15T14:59:00Z", "date_only": false, "value": "2026-10-15T14:59:00+00:00", "kind": "kev", "label": "Asserted", "source": "previdian", "record": "CVE-2025-61624", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e0958e76-a7d7-4809-9657-8a3cd33f7435", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T14:59:00Z", "date_only": false, "value": "2026-10-15T14:59:00.000Z", "kind": "kev", "label": "Catalog added", "source": "previdian", "record": "CVE-2025-61624", "field": "evidence.0.details.added_date", "uuid": "e0958e76-a7d7-4809-9657-8a3cd33f7435", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T14:59:00Z", "date_only": false, "value": "2026-10-15T14:59:00+00:00", "kind": "kev", "label": "First seen", "source": "previdian", "record": "CVE-2025-61624", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e0958e76-a7d7-4809-9657-8a3cd33f7435", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T14:59:00Z", "date_only": false, "value": "2026-10-15T14:59:00+00:00", "kind": "kev", "label": "Status updated", "source": "previdian", "record": "CVE-2025-61624", "field": "status.status_updated_at", "uuid": "e0958e76-a7d7-4809-9657-8a3cd33f7435", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-15T21:14:04Z", "date_only": false, "value": "2026-10-15T21:14:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/O4UyS5n8gxPTqV1mbyyCOkHqOUMGgtWxUhfvSPNR1ZSKFKo", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "48a505df-c471-4726-807a-9a7659d85530", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "timestamps.asserted_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": true, "value": "2026-10-16", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-61624", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": true, "value": "2026-10-16", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "evidence.0.details.date_added", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "timestamps.first_seen_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "status.status_updated_at", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T00:00:00Z", "date_only": false, "value": "2026-10-16T00:00:00.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-61624", "field": "containers.adp.0.timeline.0.time", "text": "CVE-2025-61624 added to CISA KEV"}, {"timestamp": "2026-10-16T05:00:00Z", "date_only": false, "value": "2026-10-16T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "66b7da8e-91f3-4a72-818d-1675981ee854", "url": "https://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog"}, {"timestamp": "2026-10-16T06:25:10.601Z", "date_only": false, "value": "2026-10-16T06:25:10.601489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxxwwxpero2w", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "1331886e-8472-44bc-b50b-44b558af0b22", "content": "PEERSTITCH is a memory-resident ARM64 malware delivered by exploiting Fortinet CVE-2025-61624, enabling stealthy intrusion and data theft without disk persistence or network connections.\n", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mxxwwxpero2w"}, {"timestamp": "2026-10-16T06:25:21.457Z", "date_only": false, "value": "2026-10-16T06:25:21.457724Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxxwxbulm22y", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "af0681a3-9797-4fdc-842c-7c14a7b17cfc", "content": "PEERSTITCH is a memory-resident ARM64 malware delivered by exploiting Fortinet CVE-2025-61624, enabling stealthy intrusion and data theft without disk persistence or network connections.\n", "url": "https://bsky.app/profile/devopsbriefly.bsky.social/post/3mxxwxbulm22y"}, {"timestamp": "2026-10-16T06:47:45Z", "date_only": false, "value": "2026-10-16T06:47:45.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/FMxpOxtWAX3DivfouTzklU1Yce2Vzrv1QiK9jqn6_l3OVg", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "95d901c0-e655-4534-9e68-c7b643095721", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T06:47:45Z", "date_only": false, "value": "2026-10-16T06:47:45.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/FMxpOxtWAX3DivfouTzklU1Yce2Vzrv1QiK9jqn6_l3OVg", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "2a47f8b6-159f-4d30-a097-0f9269a48b1e"}, {"timestamp": "2026-10-16T08:59:06.499Z", "date_only": false, "value": "2026-10-16T08:59:06.499344Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/117449762149219308", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "9b656d76-3964-4400-bf85-ac299e0764c9", "content": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions\nA suspected advanced threat actor has been exploiting a path traversal flaw in Fortinet FortiOS, tracked as CVE-2025-61624, to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The flaw also affects FortiPAM, FortiProxy, and FortiSwitchManager, according to The Hacker News. https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html", "url": "https://infosec.exchange/users/edwardk/statuses/117449762149219308"}, {"timestamp": "2026-10-16T08:59:07.602Z", "date_only": false, "value": "2026-10-16T08:59:07.602299Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxy7kapoq427", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "b55eb7ad-4ef5-4d8e-89d9-0f118f93deb7", "content": "PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions\n\nA suspected advanced threat actor has been exploiting a path traversal flaw in Fortinet FortiOS, tracked as CVE-2025-61624, to delive... https://threatintel.cc/2026/10/16/peerstitch-malware-deployed-via-fortios.html", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3mxy7kapoq427"}, {"timestamp": "2026-10-16T09:37:32.852Z", "date_only": false, "value": "2026-10-16T09:37:32.852735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newssecia.bsky.social/post/3mxyboxldhg2p", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "b6f586a5-2f17-4c25-906a-42eb200d2be0", "content": "\ud83e\udd16 Suspected APT exploits CVE-2025-61624 (path traversal in FortiOS CLI) to drop PEERSTITCH, an unreported memory-resident ARM64 malware bypassing checks on tagged VPN sessions. Affects FortiOS/FortiPAM/FortiProxy.\nhttps://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html", "url": "https://bsky.app/profile/newssecia.bsky.social/post/3mxyboxldhg2p"}, {"timestamp": "2026-10-16T10:30:29.204Z", "date_only": false, "value": "2026-10-16T10:30:29.204700Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/yasna.io/post/3mxyenlocqv2z", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "8369318a-c432-4174-8349-760a8296a40e", "content": "PEERSTITCH malware exploited Fortinet FortiManager and FortiOS flaws to stealthily compromise 500+ firewalls, enabling prolonged unauthorized access in a telecom environment.\n\nCVE-2024-47575, CVE-2025-61624 #Malware #CVE #infosec\n\nFull synthesis & sources: yasna.io", "url": "https://bsky.app/profile/yasna.io/post/3mxyenlocqv2z"}, {"timestamp": "2026-10-16T11:36:29.477Z", "date_only": false, "value": "2026-10-16T11:36:29.477203Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxyidn4lms2q", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "e41b80b7-1b71-4584-955e-0a9f05eded79", "content": "Unit 42 reports that attackers exploited FortiOS CVE-2025-61624 to deploy PEERSTITCH, a memory-resident implant that injects code into FortiOS daemons and alters handling of tagged VPN sessions.", "url": "https://bsky.app/profile/hendryadrian.bsky.social/post/3mxyidn4lms2q"}, {"timestamp": "2026-10-16T12:24:04Z", "date_only": false, "value": "2026-10-16T12:24:04.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/3636", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "94a1e672-0a68-41b1-81ba-057d405e04df", "content": "\ud83d\udd34 PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions\n\nA suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.\n\nThe attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a privileged attacker to achieve arbitrary write or delete files via specifically crafted arguments to existing commands. It was patched by Fortinet in April 2026.\n\n\"PEERSTITCH leaves no persistent binary on disk, opens no listening ports and initiates no outbound network connections,\" Palo Alto Networks Unit 42 researchers Daniel Gott and Shawn Westfall said. \"Instead, it communicates through traffic generated by legitimate processes on the infected host, which makes the malware resistant to conventional endpoint and network detection.\"", "url": "https://t.me/pphm_HackerNews/3636", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T12:24:04Z", "date_only": false, "value": "2026-10-16T12:24:04.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/3636", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "da2fccee-f1fe-43c3-a84b-b1bc8b2a3c7e", "content": "\ud83d\udd34 PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions\n\nA suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH.\n\nThe attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a privileged attacker to achieve arbitrary write or delete files via specifically crafted arguments to existing commands. It was patched by Fortinet in April 2026.\n\n\"PEERSTITCH leaves no persistent binary on disk, opens no listening ports and initiates no outbound network connections,\" Palo Alto Networks Unit 42 researchers Daniel Gott and Shawn Westfall said. \"Instead, it communicates through traffic generated by legitimate processes on the infected host, which makes the malware resistant to conventional endpoint and network detection.\"", "url": "https://t.me/pphm_HackerNews/3636"}, {"timestamp": "2026-10-16T15:00:33.463Z", "date_only": false, "value": "2026-10-16T15:00:33.463185Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0958e76-a7d7-4809-9657-8a3cd33f7435", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "12c7be98-b725-493e-838c-5157e9e14abd", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e0958e76-a7d7-4809-9657-8a3cd33f7435", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T17:08:19.554Z", "date_only": false, "value": "2026-10-16T17:08:19.554338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxz2uy4xkj2j", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "bb7f8839-1601-46bb-a6d3-a2ab228460d8", "content": "Here we go again, as UK enterprise perimeter infrastructure built on Fortinet appliances crumbles under CVE-2025-61624. Threat actors are merrily bypassing tagged VPN session checks across FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager to dump a lovely PEERSTITCH memory im...\n\nRead full story", "url": "https://bsky.app/profile/cerberusit.bsky.social/post/3mxz2uy4xkj2j"}, {"timestamp": "2026-10-16T17:30:35.801Z", "date_only": false, "value": "2026-10-16T17:30:35.801701Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvemon.bsky.social/post/3mxz44sfs4f2u", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "8c0090b6-9a35-41f8-b1e4-5a2420d9d83a", "content": "CVE-2025-61624 is trending. Hype score 11, currently #5 on cvemon.\n\nAn Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS\u2026\n\nhttps://cvemon.intruder.io/cves/CVE-2025-61624", "url": "https://bsky.app/profile/cvemon.bsky.social/post/3mxz44sfs4f2u"}, {"timestamp": "2026-10-16T17:34:39.507Z", "date_only": false, "value": "2026-10-16T17:34:39.507207Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/ap/users/117202824925377048/statuses/117450953307381644", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "bc9213f3-5e3b-4534-bf68-c9386ad047c9", "content": "This one slipped through the cracks this past Patch Tuesday because the CVE started with 2025:  CVE-2025-61624 (5.4 medium) path traversal > aribtrary write/deletehttps://fortiguard.fortinet.com/psirt/FG-IR-26-122\nUnit 42's blog post states it was exploited in the wild: https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/\n\nThe attackers exploited another vulnerability, CVE-2025-61624, via FortiOS auto-script path traversal. This exploit facilitated the deployment of PEERSTITCH, a novel, memory-resident ARM64 malware.\n#threatintel #eitw #CVE #fortinet #ioc", "url": "https://infosec.exchange/ap/users/117202824925377048/statuses/117450953307381644"}, {"timestamp": "2026-10-16T18:00:01Z", "date_only": false, "value": "2026-10-16T18:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-16T18:00:02.962Z", "date_only": false, "value": "2026-10-16T18:00:02.962349Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "5de9be4e-3d47-4fdb-8d33-fcda160fc578", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-16T18:31:41Z", "date_only": false, "value": "2026-10-16T18:31:41Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3VF-64GV-CXR8", "record": "GHSA-F3VF-64GV-CXR8", "field": "modified", "linked_record": true}, {"timestamp": "2026-10-16T18:33:54.956Z", "date_only": false, "value": "2026-10-16T18:33:54.956911Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxz7o2nttz2v", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "37d9cfef-96fc-455f-ab7a-09ee435aabff", "content": "\ud83d\uded1 CVE-2025-61624\nFortinet Multiple Products\nCVSS 6.0 / EPSS 1% / KEV: No\nTL;DR: An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'\u2026\nhttps://cvesentinel.com/report/CVE-2025-61624?utm_source=bluesky&utm_medium=social&utm_campaign=cvesentinel\n#infosec #CVE #vulnerability", "url": "https://bsky.app/profile/cvesentinel.bsky.social/post/3mxz7o2nttz2v"}, {"timestamp": "2026-10-16T20:01:09.084Z", "date_only": false, "value": "2026-10-16T20:01:09.084097Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mxzek2dsne2e", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "2dd45c14-5e41-4e1b-9cb3-83e9401c4704", "content": "~Cisa~\nCISA added Fortinet path traversal and BeyondTrust authentication bypass flaws to its KEV Catalog; prioritize remediation.\n-\nIOCs: CVE-2025-61624, CVE-2026-102764\n-\n#CVE #KEV #ThreatIntel", "url": "https://bsky.app/profile/cyfar.ca/post/3mxzek2dsne2e"}, {"timestamp": "2026-10-16T20:15:08.071Z", "date_only": false, "value": "2026-10-16T20:15:08.071099Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxzfd2jxq32d", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "7f2f18cb-978e-4ce1-97bb-313a4e4d8955", "content": "\ud83d\udea8 NEW on CISA KEV \u2014 exploited in the wild\nFortinet Multiple Products: Fortinet Multiple Products Path Traversal Vulnerability\nCVE-2025-61624 \u00b7 patch by 2026-10-19\n\ud83d\udd17 https://ninjasignal.ninja/intel/cve/CVE-2025-61624\n#KEV #cybersecurity #infosec", "url": "https://bsky.app/profile/ninjaintelgroup.bsky.social/post/3mxzfd2jxq32d"}, {"timestamp": "2026-10-16T21:41:06.600Z", "date_only": false, "value": "2026-10-16T21:41:06.600887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thecircuitry.to/post/3mxzk4qz3q22a", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "81dc354b-c52c-4e23-8952-4483321a822f", "content": "The Circuitry Daily Rundown: Oct 16\n\n\u2022 bbs-go Through 4.4.6 Vulnerable to Google One Tap Account Takeover\u2026\n\u2022 CISA Adds Actively Exploited Fortinet CLI Flaw CVE-2025-61624 to KEV\n\nVerified, in about a minute.", "url": "https://bsky.app/profile/thecircuitry.to/post/3mxzk4qz3q22a"}, {"timestamp": "2026-10-16T23:00:52Z", "date_only": false, "value": "2026-10-16T23:00:52.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/VulnerabilityNews/44968", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "6104af42-8cc9-4a13-8beb-10008012908e", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog\n\nCISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation.\nCVE-2025-61624 Fortinet Multiple Products Path Traversal Vulnerability\nCVE-2026-102764 BeyondTrust Remote Support Authentication Bypass by Spoofing Vulnerability\u00a0\nThese types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterprise.\u00a0\nBinding Operational Directive (BOD) 26-04: Prioritizing Security Updates Based on Risk establishes vulnerability management requirements for Federal Civilian Executive Branch (FCEB) agencies. BOD 26-04 reinforces the importance of the KEV Catalog and requires federal agencies to prioritize rapid remediation of high-risk vulnerabilities, specifically those identified by Common Vulnerabilities and Exposures (CVEs) listed in CISA\u2019s KEV Catalog on publicly exposed assets that grant total control of the asset post-exploitation, while deferring action for lower-risk vulnerabilities. BOD 26-04 further establishes basic expectations for when agencies must check whether threat actors compromised the system before the patch was applied.\u00a0\nWhile BOD 26-04 applies only to FCEB agencies, CISA encourages all organizations to adopt risk-based vulnerability management and prioritize remediation of KEV Catalog vulnerabilities. CISA will continue to add vulnerabilities to the catalog that meet the specified criteria.\u00a0\nAware of an exploited vulnerability not currently listed in the KEV Catalog? Submit it for potential addition through CISA\u2019s KEV Nomination Form. Potential KEV additions must have a CVE ID, evidence of exploitation, and clear mitigation guidance.\nhttps://www.cisa.gov/news-events/alerts/2026/10/16/cisa-adds-two-known-exploited-vulnerabilities-catalog", "url": "https://t.me/VulnerabilityNews/44968", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-17T03:55:20.565Z", "date_only": false, "value": "2026-10-17T03:55:20.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-17T03:55:20.565Z", "date_only": false, "value": "2026-10-17T03:55:20.565Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-61624", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-17T04:16:43.363Z", "date_only": false, "value": "2026-10-17T04:16:43.363", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-61624", "record": "FKIE_CVE-2025-61624", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-10-17T06:31:06.264Z", "date_only": false, "value": "2026-10-17T06:31:06.264961Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatspotai.bsky.social/post/3my2hqihjul22", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "a4895e3e-1e15-45a9-9938-a1263077899c", "content": "\ud83d\udea8 CISA KEV Alert\nCVE-2025-61624: \u26a0\ufe0f CVE-2025-61624: New Actively Exploited Vulnerability Added to CISA KEV\nSeverity: HIGH | CVSS: 0.0 | EPSS: 0.6%\nActively exploited\n\nRead the full alert: https://threatspot.ai/alerts/2025-61624-an-improper-limitation-of-a-pathname", "url": "https://bsky.app/profile/threatspotai.bsky.social/post/3my2hqihjul22"}, {"timestamp": "2026-10-17T06:50:59.043Z", "date_only": false, "value": "2026-10-17T06:50:59.043416Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybowl.bsky.social/post/3my2itzwv3i2w", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "a832baec-c370-46a4-8c13-0566c4ebc1df", "content": "\ud83d\udd34 Exploitation confirm\u00e9e (CISA KEV, ajouts du 16/10) \u00b7 2\n\u2022 Fortinet Multiple Products CVE-2025-61624, CVSS 6.5\n\u2022 BeyondTrust Remote Support CVE-2026-102764, CVSS 9.3", "url": "https://bsky.app/profile/cybowl.bsky.social/post/3my2itzwv3i2w"}, {"timestamp": "2026-10-17T10:21:55.720Z", "date_only": false, "value": "2026-10-17T10:21:55.720154Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/trustlist.bsky.social/post/3my2una6lx727", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "cc17d79a-f5bc-4980-89d5-e3983600cc04", "content": "CISA gives agencies three days to fix exploited Fortinet CLI flaw\n\nCVE-2025-61624 lets an admin with write rights create or delete files through crafted CLI arguments on FortiOS, FortiPAM, FortiProxy and\u2026\n\n#infosec #cybersecurity #USA #Sunnyvale #NetworkSecurity\ntrustlist.uk/security-advisorie\u2026", "url": "https://bsky.app/profile/trustlist.bsky.social/post/3my2una6lx727"}, {"timestamp": "2026-10-17T18:19:37.343Z", "date_only": false, "value": "2026-10-17T18:19:37.343590Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alt.pds.lefht.cc/post/3my3p3nlzck2x", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "ea30b8ed-604a-41d8-b459-f5712d0443d4", "content": "\ud83d\udee1\ufe0f Most-discussed CVEs on Bluesky, last 24h\n\n1. CVE-2026-99999 \u00b7 43 people\n2. CVE-2026-102764 \u00b7 20 people \ud83d\udd25\n3. CVE-2025-61624 \u00b7 11 people \ud83d\udd25\n4. CVE-2026-103849 \u00b7 8 people\n5. CVE-2026-104736 \u00b7 8 people\n\n\ud83d\udd25 = on CISA's Known Exploited list \u00b7 details in the thread \ud83e\uddf5", "url": "https://bsky.app/profile/alt.pds.lefht.cc/post/3my3p3nlzck2x"}, {"timestamp": "2026-10-18T13:00:15.622Z", "date_only": false, "value": "2026-10-18T13:00:15.622179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3my5nxbaf5l2y", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "69ad3315-5b5b-4a2f-b7f3-b73ebf438691", "content": "Exploited now: CVE-2025-61624 in Fortinet Multiple Products. Added to CISA KEV Oct 16, 2026. CVSS 5.4. Fortinet Multiple Products Path Traversal Vulnerability\n\n#cybersecurity #infosec\n\ninfosec-signals.mtcgroupllc.com/cves/CVE-2025-61624\n#healthcare #KEV #vulnerabilitymanagement", "url": "https://bsky.app/profile/mtcgroupllc.bsky.social/post/3my5nxbaf5l2y"}, {"timestamp": "2026-10-18T22:00:00Z", "date_only": false, "value": "2026-10-18T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "document.tracking.revision_history.1.date", "linked_record": true}, {"timestamp": "2026-10-18T22:00:00Z", "date_only": false, "value": "2026-10-18T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "document.tracking.current_release_date", "linked_record": true}, {"timestamp": "2026-10-19T00:00:00Z", "date_only": true, "value": "2026-10-19", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-61624", "field": "evidence.0.details.due_date", "uuid": "e6ae2fce-b911-430d-b2cc-aa68b37dc7b6", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-19T02:59:55.011Z", "date_only": false, "value": "2026-10-19T02:59:55.011150Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3my74upfhmt2a", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "3eb7937d-be6c-4656-9317-4db04cf0481f", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog  (CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0) #CISA (Oct 16)\n\nCVE-2025-61624 Fortinet\u8907\u6570\u88fd\u54c1\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-102764 BeyondTrust\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u8a8d\u8a3c\u306e\u306a\u308a\u3059\u307e\u3057\u306b\u3088\u308b\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3my74upfhmt2a"}, {"timestamp": "2026-10-19T02:59:55.016Z", "date_only": false, "value": "2026-10-19T02:59:55.016211Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3my74upfhmt2a", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "88710caf-5163-4227-ae69-d43b2fa8043d", "content": "CISA Adds Two Known Exploited Vulnerabilities to Catalog  (CISA\u304c\u65e2\u77e5\u306e\u60aa\u7528\u3055\u308c\u305f\u8106\u5f31\u60272\u4ef6\u3092\u30ab\u30bf\u30ed\u30b0\u306b\u8ffd\u52a0) #CISA (Oct 16)\n\nCVE-2025-61624 Fortinet\u8907\u6570\u88fd\u54c1\u306b\u304a\u3051\u308b\u30d1\u30b9\u30fb\u30c8\u30e9\u30d0\u30fc\u30b5\u30eb\u8106\u5f31\u6027\nCVE-2026-102764 BeyondTrust\u30ea\u30e2\u30fc\u30c8\u30b5\u30dd\u30fc\u30c8\u8a8d\u8a3c\u306e\u306a\u308a\u3059\u307e\u3057\u306b\u3088\u308b\u30d0\u30a4\u30d1\u30b9\u306e\u8106\u5f31\u6027 \n\nwww.cisa.gov/news-events/...", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3my74upfhmt2a"}, {"timestamp": "2026-10-19T07:45:56.510Z", "date_only": false, "value": "2026-10-19T07:45:56.510+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2026-1096", "record": "WID-SEC-W-2026-1096", "field": "document.tracking.generator.date", "linked_record": true}, {"timestamp": "2026-10-19T13:44:08Z", "date_only": false, "value": "2026-10-19T13:44:08.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/8726", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "1d195e89-89b2-464a-bdd3-303c5c7970a3", "content": "Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 APT-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 UNC5820 (CL-STA-0954), \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0440\u0435\u0434\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE \u0432 FortiManager, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-47575 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a 0-day.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Mandiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c UNC5820 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443 Palo Alto Networks, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u043e\u0433\u043e \u0436\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f UNC5820 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e CVE-2025-61624, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438.\u00a0\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f FortiOS, FortiPAM, FortiProxy \u0438 FortiSwitchManager \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2026 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Fortinet \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u043b\u0430 \u0435\u0451 \u043a\u0430\u043a 0-day.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, UNC5820 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b 0-day \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 FortiGate \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PeerStitch, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM64 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u0444\u0438\u043a, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u0430\u043a\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b FortiJump \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 FortiManager, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiGate \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u0430\u0440\u0445\u0438\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e FortiManager, \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate \u0438 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c CVE-2025-61624 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f PeerStitch.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u00ab\u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0434\u0435\u043c\u043e\u043d\u044b \u0441\u043b\u0443\u0436\u0431\u044b IKE/IPsec VPN \u0432 FortiOS, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439, \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043c\u043e\u0441\u0442 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiOS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b \u0441\u0435\u0431\u044f \u0437\u0430 FortiManager \u0432 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 FortiGate \u0438 FortiManager (FGFM), \u043e\u0442\u0434\u0430\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0435\u0440 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b \u0441\u0432\u043e\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Palo Alto Networks, UNC5820 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0433\u043e FortiManager \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-26008, \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e FortiManager.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e PeerStitch, \u0432 \u0446\u0435\u043b\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0420\u0430\u0431\u043e\u0442\u0430\u044f \u043a\u0430\u043a \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u043e\u0441\u0442 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f, \u0443\u043a\u043b\u043e\u043d\u044f\u044f\u0441\u044c \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.", "url": "https://t.me/true_secator/8726"}, {"timestamp": "2026-10-19T13:52:05Z", "date_only": false, "value": "2026-10-19T13:52:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/6689", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "e1aae054-fd23-4ddf-a897-7c599b522d7b", "content": "Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 APT-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 UNC5820 (CL-STA-0954), \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0440\u0435\u0434\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE \u0432 FortiManager, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-47575 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a 0-day.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Mandiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c UNC5820 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443 Palo Alto Networks, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u043e\u0433\u043e \u0436\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f UNC5820 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e CVE-2025-61624, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438.\u00a0\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f FortiOS, FortiPAM, FortiProxy \u0438 FortiSwitchManager \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2026 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Fortinet \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u043b\u0430 \u0435\u0451 \u043a\u0430\u043a 0-day.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, UNC5820 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b 0-day \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 FortiGate \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PeerStitch, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM64 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u0444\u0438\u043a, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u0430\u043a\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b FortiJump \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 FortiManager, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiGate \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u0430\u0440\u0445\u0438\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e FortiManager, \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate \u0438 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c CVE-2025-61624 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f PeerStitch.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u00ab\u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0434\u0435\u043c\u043e\u043d\u044b \u0441\u043b\u0443\u0436\u0431\u044b IKE/IPsec VPN \u0432 FortiOS, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439, \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043c\u043e\u0441\u0442 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiOS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b \u0441\u0435\u0431\u044f \u0437\u0430 FortiManager \u0432 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 FortiGate \u0438 FortiManager (FGFM), \u043e\u0442\u0434\u0430\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0435\u0440 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b \u0441\u0432\u043e\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Palo Alto Networks, UNC5820 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0433\u043e FortiManager \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-26008, \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e FortiManager.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e PeerStitch, \u0432 \u0446\u0435\u043b\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0420\u0430\u0431\u043e\u0442\u0430\u044f \u043a\u0430\u043a \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u043e\u0441\u0442 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f, \u0443\u043a\u043b\u043e\u043d\u044f\u044f\u0441\u044c \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.", "url": "https://t.me/S_E_Reborn/6689", "metric_role": "exploitation", "metric_basis": "sighting_report"}, {"timestamp": "2026-10-19T13:52:05Z", "date_only": false, "value": "2026-10-19T13:52:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/S_E_Reborn/6689", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "64b71dfe-ef78-408f-8db5-439d3edee829", "content": "Palo Alto Networks \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442 \u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0438 APT-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0442\u0435\u043b\u0435\u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u0443\u044e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044e, \u0432 \u0445\u043e\u0434\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 Fortinet.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435, \u043f\u0440\u0438\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c\u043e\u0435 UNC5820 (CL-STA-0954), \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u0438 \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u0434\u043b\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u0441\u0440\u0435\u0434\u0435 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0431\u044b\u043b \u043f\u043e\u043b\u0443\u0447\u0435\u043d \u043f\u0443\u0442\u0435\u043c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 RCE \u0432 FortiManager, \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u043a\u0430\u043a CVE-2024-47575 \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2024 \u0433\u043e\u0434\u0430 \u043a\u0430\u043a 0-day.\n\n\u0412\u0441\u043a\u043e\u0440\u0435 \u043f\u043e\u0441\u043b\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 Mandiant \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0434\u0438\u043b\u0430, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0430\u044f \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 FortiJump, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c UNC5820 \u043a\u0430\u043a \u043c\u0438\u043d\u0438\u043c\u0443\u043c \u0441 \u0438\u044e\u043d\u044f 2024 \u0433\u043e\u0434\u0430.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043d\u043e\u0432\u043e\u043c\u0443 \u043e\u0442\u0447\u0435\u0442\u0443 Palo Alto Networks, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0442\u043e\u0433\u043e \u0436\u0435 \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u044f UNC5820 \u0442\u0430\u043a\u0436\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0430 \u0434\u0440\u0443\u0433\u0443\u044e CVE-2025-61624, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0443\u044e \u0441 \u043e\u0431\u0445\u043e\u0434\u043e\u043c \u043f\u0443\u0442\u0438.\u00a0\n\n\u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0430\u044f FortiOS, FortiPAM, FortiProxy \u0438 FortiSwitchManager \u043e\u0448\u0438\u0431\u043a\u0430 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 2026 \u0433\u043e\u0434\u0430. \u041e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u041d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 Fortinet \u043e\u0431\u043e\u0437\u043d\u0430\u0447\u0438\u043b\u0430 \u0435\u0451 \u043a\u0430\u043a 0-day.\n\n\u0412 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 CISA \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u043e \u0435\u0435 \u0432 \u0441\u0432\u043e\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 (KEV).\n\n\u041f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, UNC5820 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b 0-day \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430 FortiGate \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c PeerStitch, \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0432\u0448\u0438\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c \u043f\u0443\u0442\u0435\u043c \u043e\u0431\u0445\u043e\u0434\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f \u041f\u041e \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM64 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u0438\u0437\u0431\u0435\u0433\u0430\u0435\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u044f \u043f\u043e\u0440\u0442\u043e\u0432 \u043f\u0440\u043e\u0441\u043b\u0443\u0448\u0438\u0432\u0430\u043d\u0438\u044f \u0438\u043b\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u0438 \u043e\u0431\u043c\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u0430\u0444\u0438\u043a, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u043c\u044b\u0439 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u043c\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u0430\u0442\u0430\u043a\u0438 \u0430\u043a\u0442\u043e\u0440 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b FortiJump \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0443 FortiManager, \u0437\u0430\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b \u043f\u043e\u0434\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u043e\u0435 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e FortiGate \u0438 \u043f\u043e\u0445\u0438\u0442\u0438\u043b \u0430\u0440\u0445\u0438\u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0439 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0443\u044e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e FortiManager, \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 500 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c\u044b\u0445 \u043c\u0435\u0436\u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u044d\u043a\u0440\u0430\u043d\u0430\u0445 FortiGate \u0438 \u0441\u0435\u0442\u0438 \u0436\u0435\u0440\u0442\u0432\u044b.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c CVE-2025-61624 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root-\u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0431\u044b\u043b \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043d \u0441\u043a\u0440\u0438\u043f\u0442 \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f PeerStitch.\n\n\u041d\u0430\u043f\u0438\u0441\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 C \u0438\u043c\u043f\u043b\u0430\u043d\u0442\u0430\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u043a\u0430\u043a \u00ab\u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440 \u0434\u043b\u044f \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430\u00bb, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u0438 \u0436\u0443\u0440\u043d\u0430\u043b\u044b \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043d\u0430 \u0434\u0435\u043c\u043e\u043d\u044b \u0441\u043b\u0443\u0436\u0431\u044b IKE/IPsec VPN \u0432 FortiOS, \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u043c\u0435\u0436\u0434\u0443 \u043d\u0438\u043c\u0438 \u0441\u043a\u0440\u044b\u0442\u044b\u0439, \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0439 \u0432 \u043f\u0430\u043c\u044f\u0442\u0438 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0439 \u043c\u043e\u0441\u0442 \u0438 \u043e\u0431\u0445\u043e\u0434\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiOS.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b \u0441\u0435\u0431\u044f \u0437\u0430 FortiManager \u0432 \u043a\u043e\u043c\u043c\u0443\u043d\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u043c\u0435\u0436\u0434\u0443 FortiGate \u0438 FortiManager (FGFM), \u043e\u0442\u0434\u0430\u0432\u0430\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0438 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0437\u0430\u0442\u0435\u0440 \u0432\u0441\u0435 \u0441\u043b\u0435\u0434\u044b \u0441\u0432\u043e\u0435\u0439 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Palo Alto Networks, UNC5820 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0441\u0435\u0441\u0441\u0438\u0438 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0433\u043e FortiManager \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c CVE-2024-26008, \u043b\u0438\u0431\u043e \u043f\u0443\u0442\u0435\u043c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u043a\u0440\u0435\u0442\u043e\u0432 \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u043e\u0433\u043e FortiManager.\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u041f\u041e PeerStitch, \u0432 \u0446\u0435\u043b\u043e\u043c, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0430\u0441\u0442\u0443\u0449\u0443\u044e \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0437\u0440\u0435\u043b\u043e\u0441\u0442\u044c \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0438\u0444\u0435\u0440\u0438\u0439\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \n\n\u0420\u0430\u0431\u043e\u0442\u0430\u044f \u043a\u0430\u043a \u043e\u0434\u043d\u043e\u0440\u0430\u0437\u043e\u0432\u044b\u0439 \u0438\u043d\u0436\u0435\u043a\u0442\u043e\u0440, \u0438\u0437\u0431\u0435\u0433\u0430\u044f \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u044b\u0445 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u043e\u0432 \u043d\u0430 \u0434\u0438\u0441\u043a\u0435 \u0438 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u044f \u0441\u043a\u0440\u044b\u0442\u044b\u0439 \u043c\u043e\u0441\u0442 \u043c\u0435\u0436\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043d\u043e\u0433\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e\u0431\u0438\u043b\u0438\u0441\u044c \u0443\u0441\u0442\u043e\u0439\u0447\u0438\u0432\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f, \u0443\u043a\u043b\u043e\u043d\u044f\u044f\u0441\u044c \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u0442 \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430.", "url": "https://t.me/S_E_Reborn/6689"}, {"timestamp": "2026-10-19T20:00:00Z", "date_only": false, "value": "2026-10-19T20:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.hkcert.org/security-bulletin/fortinet-products-elevation-of-privilege-vulnerability_20261020", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "4bc148de-6b74-4318-b013-def6c0ad549d", "url": "https://www.hkcert.org/security-bulletin/fortinet-products-elevation-of-privilege-vulnerability_20261020"}, {"timestamp": "2026-11-04T09:56:46.374Z", "date_only": false, "value": "2026-11-04T09:56:46.374220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insiderpost.bsky.social/post/3mzi3mrxn252w", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "81499a81-0005-476e-9ed6-72c30e0b4c24", "content": "$FTNT \u00b7 Fortinet reports software vulnerability and insider stock sale plans\n\nFortinet reported vulnerability CVE-2025-61624 in several network products and disclosed plans by directors Ken Xie and Michael Xie to sell shares. Both events are part of regular operational\u2026\n\n#stocks #investing", "url": "https://bsky.app/profile/insiderpost.bsky.social/post/3mzi3mrxn252w"}, {"timestamp": "2026-11-04T13:00:01Z", "date_only": false, "value": "2026-11-04T13:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "previdian", "record": "CVE-2025-61624", "field": "timestamps.recorded_at", "metric_role": "exploitation_report", "metric_basis": "kev_report", "batch_listing": true, "uuid": "e0958e76-a7d7-4809-9657-8a3cd33f7435", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-11-05T10:56:45.699Z", "date_only": false, "value": "2026-11-05T10:56:45.699234Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/insiderpost.bsky.social/post/3mzkpgyk7dj2w", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "cb9f2dc8-db68-415f-90f7-287b2c42ef55", "content": "$FTNT \u00b7 Fortinet reports vulnerability as executives trade shares\n\nBetween October 16 and November 3, 2026, Fortinet reported a vulnerability in several products, while its executives conducted share transactions. Vulnerability CVE-2025-61624 affects FortiOS, FortiPAM,\u2026\n\n#stocks #investing", "url": "https://bsky.app/profile/insiderpost.bsky.social/post/3mzkpgyk7dj2w"}], "metrics": {"as_of": "2026-11-14T09:28:32.466Z", "anchors": {"origin": {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": {"timestamp": "2026-04-14T04:00:00Z", "date_only": false, "value": "2026-04-14T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "522d885d-dbc5-4606-a3c4-f8d5a0288030", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": true, "seconds": -41991.445, "hours": -11.664290277777777, "days": -0.4860120949074074, "min_seconds": -41991.445, "max_seconds": -41991.445, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-14T04:00:00Z", "date_only": false, "value": "2026-04-14T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "522d885d-dbc5-4606-a3c4-f8d5a0288030", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit": {"available": true, "seconds": -41991.445, "hours": -11.664290277777777, "days": -0.4860120949074074, "min_seconds": -41991.445, "max_seconds": -41991.445, "approximate": false, "ongoing": false, "order_known": true, "batch_listing": false, "end_before_start": true, "start": {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-04-14T04:00:00Z", "date_only": false, "value": "2026-04-14T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "522d885d-dbc5-4606-a3c4-f8d5a0288030", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "metric_role": "exploitation", "metric_basis": "sighting_report"}}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 18467321.021788, "hours": 5129.811394941112, "days": 213.74214145587965, "min_seconds": 18467321.021788, "max_seconds": 18467321.021788, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T15:39:51.445Z", "date_only": false, "value": "2026-04-14T15:39:51.445Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-61624", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-14T09:28:32.466Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": true, "seconds": 18509312.466788, "hours": 5141.475685218889, "days": 214.22815355078706, "min_seconds": 18509312.466788, "max_seconds": 18509312.466788, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-04-14T04:00:00Z", "date_only": false, "value": "2026-04-14T04:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "record": "CVE-2025-61624", "field": "creation_timestamp", "uuid": "522d885d-dbc5-4606-a3c4-f8d5a0288030", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-122", "metric_role": "exploitation", "metric_basis": "sighting_report"}, "end": {"timestamp": "2026-11-14T09:28:32.466Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}