Cyber Posture

CVE-2025-68648

High

Published: 10 March 2026

Published
10 March 2026
Modified
13 March 2026
KEV Added
—
Patch
—
CVSS Score 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0008 23.9th percentile
Risk Priority 14 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2025-68648 is a high-severity Use of Externally-Controlled Format String (CWE-134) vulnerability in Fortinet Fortianalyzer. Its CVSS base score is 7.2 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Exploitation for Privilege Escalation (T1068); ranked at the 23.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

Threat & Defense at a Glance

What attackers do: exploitation maps to Exploitation for Privilege Escalation (T1068).
Threat & Defense Details

MITRE ATT&CK Enterprise TechniquesAI

T1068 Exploitation for Privilege Escalation Privilege Escalation
Adversaries may exploit software vulnerabilities in an attempt to elevate privileges.
attack.mitre.org →
Why these techniques?

Format string vulnerability in network-accessible management product directly enables local privilege escalation via crafted requests by an authenticated high-privileged user.

Confidence: MEDIUM · MITRE ATT&CK Enterprise v18.1

NVD Description

A use of externally-controlled format string vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer Cloud 7.6.0 through 7.6.4, FortiAnalyzer Cloud 7.4.0 through 7.4.7, FortiAnalyzer Cloud 7.2 all versions,…

more

FortiAnalyzer Cloud 7.0 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.7, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager Cloud 7.6.0 through 7.6.4, FortiManager Cloud 7.4.0 through 7.4.7, FortiManager Cloud 7.2 all versions, FortiManager Cloud 7.0 all versions may allow an attacker to escalate its privileges via specially crafted requests.

Deeper analysisAI

CVE-2025-68648 is a use of externally-controlled format string vulnerability (CWE-134) present in Fortinet FortiAnalyzer versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions, as well as FortiAnalyzer Cloud versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions. The vulnerability also affects FortiManager versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions, including FortiManager Cloud versions 7.6.0 through 7.6.4, 7.4.0 through 7.4.7, 7.2 all versions, and 7.0 all versions. The issue was published on 2026-03-10.

The vulnerability has a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H), indicating network accessibility, low attack complexity, and a requirement for high privileges. An authenticated attacker with high privileges can exploit it by sending specially crafted requests, leading to privilege escalation.

Mitigation details, including patches and advisories, are available in the Fortinet PSIRT report at https://fortiguard.fortinet.com/psirt/FG-IR-26-092.

Details

CWE(s)
CWE-134

Affected Products

fortinet
fortianalyzer
7.0.0 — 7.4.8 · 7.6.0 — 7.6.5
fortinet
fortianalyzer cloud
7.0.0 — 7.4.8 · 7.6.0 — 7.6.5
fortinet
fortimanager
7.0.0 — 7.4.8 · 7.6.0 — 7.6.5
fortinet
fortimanager cloud
7.0.0 — 7.4.8 · 7.6.0 — 7.6.5

CVEs Like This One

CVE-2025-48418Same product: Fortinet Fortianalyzer
CVE-2024-35275Same product: Fortinet Fortianalyzer
CVE-2025-64157Same vendor: Fortinet
CVE-2024-45331Same product: Fortinet Fortianalyzer
CVE-2024-46662Same product: Fortinet Fortimanager
CVE-2024-35273Same product: Fortinet Fortianalyzer
CVE-2024-33503Same product: Fortinet Fortianalyzer
CVE-2024-50563Same product: Fortinet Fortianalyzer
CVE-2025-61848Same product: Fortinet Fortianalyzer
CVE-2024-35276Same product: Fortinet Fortianalyzer

References