CVE-2026-126176
EUVD-2026-12385111.11.2026, 22:17
A xml injection (aka blind xpath injection) vulnerability in Fortinet FortiAnalyzer 8.0.0, FortiAnalyzer 7.6.0 through 7.6.7, FortiAnalyzer 7.4.0 through 7.4.11, FortiAnalyzer 7.2.0 through 7.2.12, FortiAnalyzer Cloud 8.0.0, FortiAnalyzer Cloud 7.6.0 through 7.6.7, FortiAnalyzer Cloud 7.4.1 through 7.4.11, FortiAnalyzer Cloud 7.2.1 through 7.2.12, FortiManager 8.0.0, FortiManager 7.6.0 through 7.6.7, FortiManager 7.4.0 through 7.4.11, FortiManager 7.2.0 through 7.2.12, FortiManager Cloud 8.0.0, FortiManager Cloud 7.6.0 through 7.6.7, FortiManager Cloud 7.4.1 through 7.4.11, FortiManager Cloud 7.2.1 through 7.2.12 may allow an unauthenticated remote attacker to inject arbitary content into a signed SAML response via crafted SAML requests.
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources
(CNA/ADP records, vendor advisories, Enginsight analysis).
| Vendor | Product | Version | Source |
|---|---|---|---|
| fortinet | fortimanager | 8.0.0 | CNA |
| fortinet | fortimanager | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortimanager | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortimanager | 7.2.0 ≤ 𝑥 ≤ 7.2.12 | CNA |
| fortinet | fortianalyzer | 8.0.0 | CNA |
| fortinet | fortianalyzer | 7.6.0 ≤ 𝑥 ≤ 7.6.7 | CNA |
| fortinet | fortianalyzer | 7.4.0 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.2.0 ≤ 𝑥 ≤ 7.2.12 | CNA |
| fortinet | fortianalyzer | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortianalyzer | 7.2.1 ≤ 𝑥 ≤ 7.2.12 | CNA |
| fortinet | fortimanager | 7.4.1 ≤ 𝑥 ≤ 7.4.11 | CNA |
| fortinet | fortimanager | 7.2.1 ≤ 𝑥 ≤ 7.2.12 | CNA |