CISA Adds Arista VeloCloud Orchestrator and Fortinet FortiOS Vulnerabilities to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added vulnerabilities in Arista VeloCloud Orchestrator and Fortinet FortiOS to its Known Exploited Vulnerabilities (KEV) catalog. The specific flaw CVE-2025-68686 was mentioned, though further technical details were not provided in the available content. The inclusion in the KEV catalog indicates these vulnerabilities are actively exploited or pose significant risk to federal enterprises. No exact dates for the addition or exploitation were specified. The action targets flaws in widely used network and security infrastructure products. The source of the vulnerabilities or attack vectors remains unconfirmed in the reported content.