CyberSecurityBoardThreat Intel · CVEs · Products
Critical CVEs

CVE-2025-68686: Fortinet FortiOS SSL-VPN Information Disclosure

July 27, 2026

A medium-severity information disclosure vulnerability in FortiOS SSL-VPN (CVSS 5.3) allowing remote unauthenticated attackers to bypass a patch for symbolic link persistency. Added to CISA KEV with active exploitation evidence.