CVE-2024-48884

CVE-2024-48884 is a critical path traversal vulnerability affecting multiple Fortinet products, including FortiManager, FortiManager Cloud, FortiOS, and FortiProxy. This flaw allows a remote authenticated attacker with specific interface access to write arbitrary files, or a remote unauthenticated attacker to delete arbitrary folders. With a CVSS score of 9.1 (Critical), the vulnerability has a network attack vector, low attack complexity, and high impact on integrity and availability. While there is no known active exploitation, public exploit code, or KEV entry, the vulnerability has garnered some community discussion and media coverage, indicating awareness.