H3XAOperational intelligence
Live analytical pictureEvidence before assessment
Threat intelligence / Vulnerability

CVE-2025-68686

Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.

Vulnerability
TypeVulnerability
External ID—
First seen2026-07-27
Last seen2026-07-27

Confidence

—

Fortinet FortiOS contains an exposure of sensitive information to an unauthorized actor vulnerability. This may allow a remote unauthenticated attacker to bypass the patch developed for the symbolic link persistency mechanism observed in some post-exploit cases, via crafted HTTP requests. An attacker would need first to have compromised the product via another vulnerability, at filesystem level.

Labels

exploitedkev

CISA KEV context

Vendor / productFortinet FortiOS
Added2026-07-27
Due date2026-08-10
60 recorded

Relationships

mitigates
from Remediate CVE-2025-68686
Mitigation
related-to
to Account Footprinting
Technique
related-to
to Active OS Fingerprinting
Technique
related-to
to Browser Fingerprinting
Technique
related-to
to DNS Zone Transfers
Technique
related-to
to Eavesdropping
Technique
related-to
to Enumerate Mail Exchange (MX) Records
Technique
related-to
to Establish Rogue Location
Technique
related-to
to Excavation
Technique
related-to
to Exploiting Trust in Client
Technique
related-to
to File Discovery
Technique
related-to
to Fingerprinting
Technique
related-to
to Footprinting
Technique
related-to
to Group Permission Footprinting
Technique
related-to
to Host Discovery
Technique
related-to
to ICMP Address Mask Request
Technique
related-to
to ICMP Echo Request Ping
Technique
related-to
to ICMP Error Message Echoing Integrity Probe
Technique
related-to
to ICMP Error Message Quoting Probe
Technique
related-to
to ICMP Information Request
Technique
related-to
to Identify Shared Files/Directories on System
Technique
related-to
to IP (DF) 'Don't Fragment Bit' Echoing Probe
Technique
related-to
to IP 'ID' Echoed Byte-Order Probe
Technique
related-to
to IP ID Sequencing Probe
Technique
related-to
to Network Topology Mapping
Technique
related-to
to Owner Footprinting
Technique
related-to
to Passive OS Fingerprinting
Technique
related-to
to Peripheral Footprinting
Technique
related-to
to Port Scanning
Technique
related-to
to Process Footprinting
Technique
related-to
to Reusing Session IDs (aka Session Replay)
Technique
related-to
to Scanning for Vulnerable Software
Technique
related-to
to Services Footprinting
Technique
related-to
to Session Credential Falsification through Prediction
Technique
related-to
to Shoulder Surfing
Technique
related-to
to Subverting Environment Variable Values
Technique
related-to
to TCP ACK Ping
Technique
related-to
to TCP ACK Scan
Technique
related-to
to TCP Congestion Control Flag (ECN) Probe
Technique
related-to
to TCP Connect Scan
Technique
related-to
to TCP FIN Scan
Technique
related-to
to TCP Initial Window Size Probe
Technique
related-to
to TCP (ISN) Counter Rate Probe
Technique
related-to
to TCP (ISN) Greatest Common Divisor Probe
Technique
related-to
to TCP (ISN) Sequence Predictability Probe
Technique
related-to
to TCP Null Scan
Technique
related-to
to TCP Options Probe
Technique
related-to
to TCP RPC Scan
Technique
related-to
to TCP 'RST' Flag Checksum Probe
Technique
related-to
to TCP Sequence Number Probe
Technique
related-to
to TCP SYN Ping
Technique
related-to
to TCP SYN Scan
Technique
related-to
to TCP Timestamp Probe
Technique
related-to
to TCP Window Scan
Technique
related-to
to TCP Xmas Scan
Technique
related-to
to Timestamp Request
Technique
related-to
to Traceroute Route Enumeration
Technique
related-to
to UDP Ping
Technique
related-to
to UDP Scan
Technique
related-to
to Using Slashes in Alternate Encoding
Technique
2 external

References

nvd
CVE-2025-68686
open
cwe
CWE-200
open
Continue into the dataIntelligence explorerHow to read the graphEvidence & provenance