CVE-2025-68648
Published: 10 March 2026
Summary
CVE-2025-68648 is a high-severity Use of Externally-Controlled Format String (CWE-134) vulnerability in Fortinet Fortianalyzer. Its CVSS base score is 7.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 24.8th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
CVE-2025-68648 is a use of externally-controlled format string vulnerability (CWE-134) present in Fortinet FortiAnalyzer versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions, as well as FortiAnalyzer Cloud versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions. The vulnerability also affects FortiManager versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions, including FortiManager Cloud versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions. The issue was published on 2026-03-10.
The vulnerability has a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating network accessibility, low attack complexity, and a requirement for high privileges. An authenticated attacker with high privileges can exploit it by sending specially crafted requests, leading to privilege escalation.
Mitigation details, including patches and advisories, are available in the Fortinet PSIRT report at https://fortiguard.fortinet.com/psirt/FG-IR-26-092.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2025-208498
Vulnerability details
A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.2, FortiAnalyzer Cloud 7.4.1 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions, FortiAnalyzer Cloud…
more
7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.2 through 7.6.3, FortiManager Cloud 7.4.1 through 7.4.7, FortiManager Cloud 7.2.1 through 7.2.10, FortiManager Cloud 7.0.1 through 7.0.14 may allow an attacker to escalate its privileges via specially crafted requests.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
Format string vulnerability in network-accessible management product directly enables local privilege escalation via crafted requests by an authenticated high-privileged user.
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates CWE-134 by requiring validation and sanitization of externally supplied format strings in requests before they reach vulnerable logging or formatting functions.
Requires prompt application of vendor patches that eliminate the externally-controlled format string flaw in the affected FortiAnalyzer/FortiManager versions.
Limits the population of accounts holding the high privileges (PR:H) needed to send the specially crafted requests that trigger privilege escalation.