ThreatsTechnology, Cloud & SaaSHighFortinet FortiOS SSL-VPN Sensitive Information Disclosure Flaw CVE-2025-68686 Actively Targeted for Initial AccessCISA updates KEV with CVE-2025-68686, a critical information disclosure vulnerability in Fortinet FortiOS exploited to harvest active VPN session tokens.CST Newsroom·16 Sep 2026, 07:50 IST·9 min read