Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2025-68686

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via anothe
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:628a9f94f9648d2419525f3e2523c860ebda7cfbf39c11e23a3eb4d200a81dcd
Known exploited
CISA KEV
Disputed
No
Stale source
No
Conflicts
0

Affected products and versions

1 source assertion
{"cpes":["cpe:2.3:o:fortinet:fortios:7.6.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.6:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.5:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.4:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.3:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.2:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.1:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.4.0:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.13:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.12:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:7.2.11:*:*:*:*:*:*:*",…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:93c4206ef762548d4dfbc06ba8343222570fd7d3ee375cb30d2702708b807d8d · sha256:f79653b852c8f300… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"attackComplexity":"HIGH","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:93c4206ef762548d4dfbc06ba8343222570fd7d3ee375cb30d2702708b807d8d · sha256:f79653b852c8f300… · /containers/cna/metrics/0/cvssV3_1

CWE assertions

1 source assertion
{"cweId":"CWE-200","description":"Information disclosure","lang":"en","type":"CWE"}
  • cve_program_cvelist_v5cwe
    urn:baitaphish:normalized-source-record:v2:93c4206ef762548d4dfbc06ba8343222570fd7d3ee375cb30d2702708b807d8d · sha256:f79653b852c8f300… · /containers/cna/problemTypes/0/descriptions/0

Known exploitation assertions

2 source assertions
{"cwes":["CWE-200"],"dateAdded":"2026-07-27","dueDate":"2026-08-10","knownRansomwareCampaignUse":"Unknown","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686","product":"FortiOS","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with C…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:85c9d18d5e9e7d8075e3e82365ab77d92481e1631cf1b56a340600d0bc5070b8 · sha256:635dff916c4092c0… · /vulnerabilities/5
    Open source location →
{"cwes":["CWE-200"],"dateAdded":"2026-07-27","dueDate":"2026-08-10","knownRansomwareCampaignUse":"Unknown","notes":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934 ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2025-68686","product":"FortiOS","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with C…
  • cisa_kev_jsonknown_exploited
    urn:baitaphish:normalized-source-record:v2:96d25f636b2193285e2027082cc84986b127f9ed4a1531079a445e1edbc430a3 · sha256:16acee8334e59e44… · /vulnerabilities/2
    Open source location →

Source references

2 source assertions
{"name":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934","url":"https://fortiguard.fortinet.com/psirt/FG-IR-25-934"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:93c4206ef762548d4dfbc06ba8343222570fd7d3ee375cb30d2702708b807d8d · sha256:f79653b852c8f300… · /containers/cna/references/0
{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-68686"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:93c4206ef762548d4dfbc06ba8343222570fd7d3ee375cb30d2702708b807d8d · sha256:f79653b852c8f300… · /containers/adp/0/references/0

Attribution and limitations

  • CISA Known Exploited Vulnerabilities JSON: CISA named for provenance; do not use CISA/DHS marks or imply endorsement Source →
  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer