CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
1 advisories matched
2026-02-10
Fortinet FortiOS Sensitive Information Exposure and Symbolic Link Patch Bypass (CVE-2025-68686)
[Affected Scope] Fortinet FortiOS versions 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, and all versions of 7.2, 7.0, and 6.4
[Impact] A remote unauthenticated attacker with prior filesystem-level access can bypass existing symbolic link persistency mitigations via crafted HTTP requests to expose sensitive information
[Mitigation] Immediately upgrade to the patched firmware versions recommended in the official Fortinet advisory (FG-IR-25-934)