## PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions

- 種別: news
- CVE: CVE-2025-61624
- 公開日時: 2026-10-16T04:59:36.000Z
- 情報源: The Hacker News (https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.html)
- パーマリンク: https://vulnpulse.app/items/thehackernews-a2dfa0394e06

A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a