CVE-2026-126170
EUVD-2026-12384411.11.2026, 22:17
A improper encoding or escaping of output vulnerability in Fortinet FortiAnalyzer 8.0.0 through 8.0.2, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer Cloud 8.0.1 through 8.0.2, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer-BigData 7.6.0 through 7.6.2, FortiManager 8.0.0 through 8.0.2, FortiManager 7.6.0 through 7.6.7, FortiManager Cloud 8.0.1 through 8.0.2, FortiManager Cloud 7.6.0 through 7.6.7 may allow an unauthenticated attacker to execute unauthorized code or commands via a specially crafted HTTP requestEnginsight
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortimanager | 8.0.0 ≤ 𝑥 ≤ 8.0.2 | CNA |
| fortinet | fortimanager | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortianalyzer | 8.0.0 ≤ 𝑥 ≤ 8.0.2 | CNA |
| fortinet | fortianalyzer | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortimanager | 8.0.1 ≤ 𝑥 ≤ 8.0.2 | CNA |
| fortinet | fortianalyzer | 8.0.1 ≤ 𝑥 ≤ 8.0.2 | CNA |
Vulnerability Media Exposure