CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–2 of 2 advisories (Page 1/1)

CVE-2025-686865.9/MEDIUMEPSS 29.5%CISA KEV

2026-02-10

Fortinet FortiOS Sensitive Information Exposure and Symbolic Link Patch Bypass (CVE-2025-68686)

[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4

[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information

[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)

fortios cwe-200 symbolic-link post-exploitation bypass

Full Advisory & Mitigation

CVE-2020-06837.8/HIGHEPSS 7.7%CISA KEV

2020-02-11

Windows Installer Privilege Escalation via Symbolic Link Manipulation (CVE-2020-0683)

[Affected Scope] Windows 7, 8.1, 10, and Windows Server 2008, 2012, 2016, 2019 containing the Windows Installer service

[Impact] Local attackers can exploit improper symbolic link handling in MSI packages to execute arbitrary code with SYSTEM privileges, leading to full host compromise

[Mitigation] Apply the official Microsoft security updates immediately and restrict non-admin MSI installation privileges as a temporary workaround

CWE-59 Privilege-Escalation Local-Exploit Symbolic-Link MSI

Full Advisory & Mitigation