CVE-2025-68482 Weak cryptography in FortiAnalyzer
Remote attackers can view confidential information via man-in-the-middle attacks due to improper certificate validation in Fortinet log management products.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-68482?
CVE-2025-68482 is a medium-severity vulnerability in Fortinet Fortianalyzer, published on 10 Mar 2026. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.
Weakness: CWE-295
Which versions are affected by CVE-2025-68482?
It affects 2 products.
Products include Fortinet Fortianalyzer, Fortinet Fortimanager.
How do I fix CVE-2025-68482?
No fix has been published for CVE-2025-68482 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-68482 being exploited?
There is no known exploitation of CVE-2025-68482 in the wild and no public exploit code.
Other vulnerabilities in Fortinet Fortianalyzer
- CVE-2026-24858 Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel
- CVE-2023-25610 Memory corruption in FortiAnalyzer
- CVE-2021-32603 Server-side request forgery in Fortinet FortiAnalyzer, FortiManager
- CVE-2020-12817 Cross-site scripting in Fortinet FortiAnalyzer
- CVE-2024-48886 Auth bypass in FortiOS
Sources
Also known as GHSA-pfxg-w7qf-6x65.