onyx

onyx --cves cve-2025-68686

CVE-2025-68686

MEDKEVFortinet FortiOS
score
4.9
cvss
5.9
epss
29.5%
published
2026-02-10
kev added
2026-07-27
first seen

Fortinet FortiOS 6.4 all versions, 7.0 all versions, 7.2 all versions, 7.4.0 through 7.4.6, and 7.6.0 through 7.6.1 contain an information disclosure vulnerability caused by bypassing symbolic link persistency patch via crafted HTTP requests, letting remote unauthenticated attackers access sensitive information after prior compromise at filesystem level.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2026-02-10 — PublishedP2026-07-27 — Added to CISA KEVK2026-10-21 (seen by) — Tracked by OnyxTscore2026-10-21: score 4.94.9epss2026-09-22: epss 29.6%2026-09-23: epss 29.6%2026-09-24: epss 29.6%2026-09-25: epss 29.6%2026-09-26: epss 29.6%2026-09-27: epss 29.6%2026-09-29: epss 29.6%2026-09-30: epss 29.6%2026-10-01: epss 29.6%2026-10-02: epss 29.6%2026-10-03: epss 29.6%2026-10-04: epss 29.6%2026-10-05: epss 29.6%2026-10-06: epss 29.6%2026-10-07: epss 29.6%2026-10-08: epss 29.5%2026-10-09: epss 29.5%2026-10-10: epss 29.5%2026-10-11: epss 29.5%2026-10-12: epss 29.5%2026-10-13: epss 29.5%2026-10-14: epss 29.5%2026-10-15: epss 29.5%2026-10-16: epss 29.5%2026-10-18: epss 29.5%2026-10-19: epss 29.5%2026-10-20: epss 29.5%2026-10-21: epss 29.5%29.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Added to CISA KEV
  3. Tracked by Onyx

Weaknesses

CWE-200

References 7