CVE-2025-68686 Fortinet FortiOS
An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow a…
- CVSS
- 5.3 Medium
- EPSS
- 30%
- Percentile
- 98
- Published
- 2026-02-10
- Force
- 8 of 12
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
On CISA’s exploited list
Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
- Added
- 2026-07-27
- Federal patch deadline
- 2026-08-10
- Ransomware use
- not known