Fortinet FortiOS Vulnerability Under Investigation: Early Warning
Fortinet FortiOS is reportedly under investigation for a vulnerability (CVE-2025-68686) that may allow a remote unauthenticated attacker to expose sensitive information, provided the product has already been compromised via another vulnerability.
What happened
An early warning has been issued regarding a potential vulnerability in Fortinet FortiOS, tracked as CVE-2025-68686. This vulnerability appears to allow a remote unauthenticated attacker to expose sensitive information. However, exploitation of this issue reportedly requires the attacker to have already compromised the system via another vulnerability at the filesystem level. Professional software engineers using FortiOS should monitor their systems for any signs of compromise and ensure that all other known vulnerabilities are patched to mitigate the risk of this potential issue being exploited. For more detailed information, the primary sources should be consulted.
How 0Day mitigates this
fortios is anywhere in your dependency tree, the engineers who own the affected repositories get a push alert the moment it is flagged — no manual audit to remember to run.Read how this differs from waiting on a scanner to catch a known advisory, or see the exact, read-only access 0Day needs to do this for an organization.