Fortinet PSIRT Monthly Advisories — February 2026
Tuesday, 10 February 2026
- Vulnerabilities
- 8
- Critical
- 0
- High
- 2
- Zero-days
- 0
- Public exploit
- 1
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
Public exploit code 1
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- Medium 6.4
All vulnerabilities 8
High2 ShowHide
Medium5 ShowHide
-
Medium 5.3
CVE-2025-68686 Exploited An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1, FortiOS 7.4.0 thro…EPSS 29%
- Medium 6.8
-
Medium 6.7
CVE-2025-64157 A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, …EPSS 1.5%
- Medium 6.4
- Medium 5.2