CVE-2025-68482

The record

A improper certificate validation vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to view confidential information via a man in the middle [MiTM] attack.

Affected packages

Related vulnerabilities

• CVE-2026-96375 Improper Certificate Validation vulnerability in Drupal Cloud allows Adversary in the… CWE-295
• CVE-2026-87944 Improper Certificate Validation vulnerability in Drupal SAML SSO - Service Provider… CWE-295
• CVE-2026-114642 Traefik 2.11.0 before 2.11.58 and 3.0.0 before 3.7.14 stores its NTLM/Kerberos backend… CWE-295
• CVE-2026-114406 The system certificate authority (CA) store in Red Hat products, distributed via… CWE-295
• CVE-2026-95210 Improper certificate validation in gnutls v3.8.13 causes the application to accept… CWE-295
• CVE-2026-97687 urllib3 is an HTTP client library for Python. CWE-295
• CVE-2026-101916 @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a… CWE-295
• CVE-2026-63374 AnyIO is a high level asynchronous concurrency and networking framework that works on top… CWE-295